last executing test programs: 22m17.395205927s ago: executing program 32 (id=2): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) add_key(&(0x7f0000000280)='big_key\x00', &(0x7f0000000300)={'syz', 0x3}, &(0x7f00000003c0)="e21a5116f3b7dbdb06d57706cb60e6a4318ca828a2677eff85b21478669927efce72c7e29028b8ad3d4046353cce90a0a9f71db457730f763f83842300f21bea633e51bf34caf606cb6c601f5827100de124c59f27631a8fe4e08cae0cb897fe9150f7ad490a8727b8aa5a069e76e2f1456febdccc", 0x75, 0xffffffffffffffff) keyctl$search(0xa, 0x0, 0x0, &(0x7f00000004c0)={'syz', 0x2}, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') pwritev2(r2, &(0x7f0000000600)=[{0x0}, {&(0x7f00000005c0)="6f8c9f02f8478ad03a", 0x9}], 0x2, 0xd, 0xf25, 0x14) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x513, &(0x7f0000000c40)="$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") 20m5.948101871s ago: executing program 33 (id=246): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) add_key(&(0x7f0000000280)='big_key\x00', &(0x7f0000000300)={'syz', 0x3}, &(0x7f00000003c0)="e21a5116f3b7dbdb06d57706cb60e6a4318ca828a2677eff85b21478669927efce72c7e29028b8ad3d4046353cce90a0a9f71db457730f763f83842300f21bea633e51bf34caf606cb6c601f5827100de124c59f27631a8fe4e08cae0cb897fe9150f7ad490a8727b8aa5a069e76e2f1456febdccc", 0x75, 0xffffffffffffffff) keyctl$search(0xa, 0x0, 0x0, &(0x7f00000004c0)={'syz', 0x2}, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x513, &(0x7f0000000c40)="$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") 15m15.947783739s ago: executing program 34 (id=1033): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b70300000000000085000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x0, &(0x7f0000000340)}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r7, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x8840) connect$inet6(r6, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x2400000, 0x0, 0x0, 0x10, "00f8fffffffffffffff7ffffff00"}) r8 = syz_open_pts(r1, 0x121500) ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000000280)=0x3) 14m29.671769145s ago: executing program 35 (id=1098): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet_opts(r1, 0x0, 0xd, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x4, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000000)={'syztnl0\x00', &(0x7f0000000240)={'ip6gre0\x00', 0x0, 0x29, 0xff, 0x61, 0x6, 0x21, @private2, @local, 0x700, 0x20, 0x2, 0x3}}) r3 = geteuid() mount$9p_unix(0x0, &(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x8000, &(0x7f0000000580)={'trans=unix,', {[{@dfltuid={'dfltuid', 0x3d, r3}}, {@uname={'uname', 0x3d, '\x00'}}, {}, {@debug={'debug', 0x3d, 0xd}}], [{@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'g'}}, {@flag='ro'}]}}) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in6=@empty, @in=@remote, 0x4e21, 0xc, 0x4e22, 0xe40c, 0x2, 0x80, 0xa0, 0x1, r2, r3}, {0x40, 0xe73, 0x10001, 0x9, 0x7, 0x8, 0x3, 0x6}, {0x8f, 0x6, 0x2, 0x3}, 0xfffff074, 0x6e6bb2, 0x1, 0x1, 0x1, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x4d5, 0x33}, 0xa, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3505, 0x4, 0x0, 0x44, 0x9, 0x3, 0x26ea}}, 0xe8) setsockopt$inet6_int(r1, 0x29, 0x31, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1088d8b8588d72ec29c48f0af5f2d9f51c4b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465ad32b77a74e802a0dc6bf25cca242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000126abfb0767042361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae645ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1fb8f72cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa7956488bef241875f3b4b6ab7929a57affe760e797724f4fce1093b62d7e8c7123d890decacec55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f870b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3acb2003016f154772f514216bdf57d2a40d40b51ab67903ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1594e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c471c784ae7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec30cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89f0000377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f0059161c5e0000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe34124172e436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f491d8e97c862e29e457060000007ac691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104ebc1581848f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426ca85e82ccf821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ad6acf5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bdc4a60d637545ed4c8a1c649c3ce54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c5140200000054d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a3bc38613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae0040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483f02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e9180100000000000000654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272ab28a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece98c077b358e752b439132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac48f1201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6df5e8a795b140fcc09e8a7b694d12932917facd8ceaa4e2d0d16bb0b95387fcd5ff136d8abddf94daf442bbff744591931872a36cf921ad69f2127386e8b0f9afee4da8d3fbec809fbb3ca0fded2859cf25d4c6155d396c5b9bd1a928923123f63f4c40688eae69990a9419456247bbaeb7948de84d2ff875414883bb1e503d4bfebc01bc12a53ea06bf38e571157bd642dac25dbee7832c58378374a39483d6721eec96c28911db21c0c006b42afc90000000000000000000000700000000000000000008ce4ea442c1a207108b35511186c5e860278f6463f52f3990ce08b1bfccc3cff4b5ae27b610aa9ba11b47d4f94c439e055cdbb2b12c983885c93ea4ab4ca1e02d831ae162ee104"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001d40)={&(0x7f00000009c0)='sched_switch\x00', r7}, 0x10) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) sendmmsg$inet6(r1, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r1, 0x0, 0x0, 0x12141, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={'batadv_slave_1\x00', {0x2, 0xa00, @loopback}}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3e, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0x6, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x1, 0x1, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0xd974, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x101, 0x7fff, 0x6, 0x400, 0x400, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x10, 0x9, 0x8, 0x5, 0x4, 0x2000047, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x7d10, 0x3, 0x2, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x100, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x82, 0x3, 0x20000008, 0x4004, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x1, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x24], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x3, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x8, 0x7, 0xaf, 0xb, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa5e4, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x4fff]}, 0x45c) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f00000004c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 13m13.489417543s ago: executing program 36 (id=1201): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = creat(&(0x7f0000000100)='./bus\x00', 0x0) open(0x0, 0x14507e, 0x54) r4 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) syz_open_dev$usbfs(0x0, 0x1ff, 0x1501) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) io_setup(0x2, &(0x7f0000002400)=0x0) io_submit(r5, 0x1, &(0x7f0000000040)=[&(0x7f00000010c0)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}]) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000100)={[{@nombcache}, {@resgid}, {@norecovery}, {@commit={'commit', 0x3d, 0x5}}, {@nombcache}]}, 0x8, 0x5fb, &(0x7f00000004c0)="$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") fcntl$setpipe(0xffffffffffffffff, 0x407, 0x401) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) fallocate(r3, 0x0, 0x0, 0x1000f4) 12m33.832019623s ago: executing program 7 (id=1296): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRESDEC=r2, @ANYRESHEX=r3], 0x0, 0x100000, 0x0, 0x0, 0x0, 0x3d, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdir(0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) readv(r4, &(0x7f0000000000), 0x0) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket(0x1, 0x3, 0x0) bind$unix(r5, &(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e) listen(r5, 0x6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0xfffffffffffffefd) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f0000000540)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r6}, 0x18) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12411f9c4492176721d325000000000040341d0a000080000000010902240001000000000904000001001000000921000000012203000911810300000000007d"], 0x0) 12m30.554440346s ago: executing program 7 (id=1300): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) socket(0x10, 0x803, 0x0) dup3(0xffffffffffffffff, r1, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="77ba00000000000000001f0000"], 0x48}, 0x1, 0x0, 0x0, 0x1a854}, 0x0) 12m28.974891726s ago: executing program 7 (id=1303): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x2}, 0x8) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) creat(0x0, 0x3e) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x14) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) sendmsg$NFT_BATCH(r1, 0x0, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xf, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0xa5}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) syz_clone(0x600, 0x0, 0x27, 0x0, 0x0, 0x0) setpriority(0x1, 0x0, 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f030005000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) sendto$inet6(r0, &(0x7f0000000080)="be", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) shutdown(r0, 0x1) 12m26.049405084s ago: executing program 7 (id=1309): syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet6(0xa, 0x800000000000002, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000001000000e27f000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000005700)={{r3, 0xffffffffffffffff}, &(0x7f0000005680), &(0x7f00000056c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) pipe(&(0x7f0000000040)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) getpid() syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xb2}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) 12m20.786226943s ago: executing program 7 (id=1317): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x2}, 0x8) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) creat(0x0, 0x3e) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x14) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) sendmsg$NFT_BATCH(r1, 0x0, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xf, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0xa5}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) syz_clone(0x600, 0x0, 0x27, 0x0, 0x0, 0x0) setpriority(0x1, 0x0, 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f030005000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) sendto$inet6(r0, &(0x7f0000000080)="be", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) shutdown(r0, 0x1) 12m15.987231646s ago: executing program 7 (id=1325): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000080)={[{@nobh}, {@auto_da_alloc}, {@data_err_ignore}]}, 0x3, 0x4cd, &(0x7f0000000c80)="$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") r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mount_setattr(0xffffffffffffff9c, 0x0, 0x8100, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) ioctl$SNDRV_PCM_IOCTL_FORWARD(0xffffffffffffffff, 0xc0884123, 0x0) rename(&(0x7f00000003c0)='./file0\x00', 0x0) faccessat2(r0, &(0x7f0000000180)='./file0\x00', 0x14, 0x200) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r4, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) 12m0.123413225s ago: executing program 37 (id=1325): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000080)={[{@nobh}, {@auto_da_alloc}, {@data_err_ignore}]}, 0x3, 0x4cd, &(0x7f0000000c80)="$eJzs3M9vFGUfAPDvbHdpgZfXioiCKAU0Nia2UFA4eMHExIMmRjzIsWkrQRYwtAchREpi8Ezi3Xg03jTxqkfjyT8ADx5MDAkxXABPa2Z3pt3ur+7CtqXs55Ns+zwzz8zzPDPzzD77PDsbwMAaS/8kEf+LiFsR8VQtujLBWO3f/btXZx7cvToTi5XKqX+Sarp7aTyTb7c9i4wXIgpfJg07rJm/fOXcdLk8dymLTy6c/2xy/vKV18+enz4zd2buwtSJE8eOHjn+5tQbvVeqRX5pve7t/eLivj3vnr75/kwxXz6S/a+vR1vF3oox1mHdK73t6rG3oy6cNB+na+taGLo2kl3WpbT9Xy0fPL3RBQLWTaVSqQy3X71YaXS9aQmwaSWx0SUANkb+Rp9+/s1f69T1eCzcOVn7AJTW+372qq0pRiFLU2r4fNtPYxHx8eK/36Sv6DQO8ecaFQAAGDi/nMx7go39v0Lsrkv3/2wOZTQino6InRHxTETsiohnI6ppn4uI5xszSCIqHfLf1RBfzv/HbBahcPuRK9lB2v97K5vbWtn/y3t/MTqUxXZE5B3mucPZMRmP0vAnZ8tzR9rsf8sq+df3/9JXmn/eF8zKcbvYMEA3O70w/XC1bXbnesTeYmP9k2J64vJpnCQi9kTE3h72O1oXPvvad/uWIqWV6Vavf1WlxZRez/NxrVS+jXi1dv4XY8X5X84x6Tw/OTkS5bnDk+lVcLhlHr/9fuODdvmvWv+f/mrc5J3jP5961GovSc//trrrP/L52+X6jyYRydJ87XxEZai3PG788VV1v2OHmtc97PW/JfmoGs7b1+fTCwuXjkRsSd5rXj61vG0ez9On9R8/1Lr978y2SY/ECxGRXsQvRsRLEbE/K/uBiDgYES2qtuTXt1/+tN26Lq//NZPWf7bl/W/F+V+er+8ykG+cLhk6d+DWgzY3j+7O/7FqaDxb0vr+l6y4RXRb0kc7egAAALA5FKL63f/CxFK4UJiYqI0B7YpthfLF+YX9EXFhtvaMwGiUCvlIV208uJTk45+jdfGphvjRbNz466Gt1fjEzMXy7EZXHgbc9mqbT5raf+rvHsd5gU2oD/NowCa1WvvffXOdCgKsO+//MLjq2v9imySLvikDTybv/zC4WrX/a/F9x2cX3DNg86toyzDQtH8YXMX4cClcfey55dO2wJPI+z8MpF6f6+8tUBluvWokWvxiwMjaFGNri7w2JJD2rPq4w1JEdJd468NkkXcB2//CQ6G3HQ5H86qh6LRV0sPvOOSB9KismvjM7r5f/PlvovT7svlhuZ2WujzdfQpsyO0IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg7/4LAAD///QJ1ng=") r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mount_setattr(0xffffffffffffff9c, 0x0, 0x8100, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) ioctl$SNDRV_PCM_IOCTL_FORWARD(0xffffffffffffffff, 0xc0884123, 0x0) rename(&(0x7f00000003c0)='./file0\x00', 0x0) faccessat2(r0, &(0x7f0000000180)='./file0\x00', 0x14, 0x200) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r4, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) 11m11.047469077s ago: executing program 8 (id=1436): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163767461700004000280080005", @ANYRES32=r2], 0x44}}, 0x0) 11m10.060712209s ago: executing program 8 (id=1438): prctl$PR_SET_IO_FLUSHER(0x39, 0x1) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000200)={[{@jqfmt_vfsold}, {@max_batch_time={'max_batch_time', 0x3d, 0x1}}, {@debug}, {@noload}, {@nombcache}, {@noblock_validity}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}]}, 0x1, 0x46c, &(0x7f0000000f00)="$eJzs3M1vFOUfAPDvTF94+/FrRXwBQapoJL60tLzIwYtGEw6amOgB46m2hVQWamhNhBCtHvBoSLwb/wvjSS9GvWjiVe+GhBguoF7WzM4MLMtu2aXbLrCfTzLd55l5us/znZln95l5djeAvjWW/Uki/hcRv0fESJ69ucBY/nDtyvmZv6+cn0miWn3rr6RW7uqV8zNl0fL/tuSZarXIb2hS74V3I6YrlbkzRX5i6dQHE4tnz70wf2r6xNyJudNTR44cPLB7+PDUoa7EmcV1defHC7t2HH3n4hszxy6+91OSRh53NMTRLWP53m3q6W5X1mNb69LJYP2WPb/cSDc7E+ilgYjIDtdQrf+PxEBsur5tJF77rKeNA9ZUtVqtrvCqvFwF7mNJ9LoFQG+Ub/TZ9W+5rNPQ465w+eX8AiiL+1qx5FsGI80Te4Yarm+7aSwiji3/81W2xBrdhwAAqPddNv55vtn4L42H88Rw9uf/xRzKaEQ8EBHbIuLBiNgeEQ9F1Mo+EhGPdlh/4wzJreOf9NIdB9eGbPz3UjG3dfP4Ly2LjA4Uua21+IeS4/OVuf3FPtkXQxuOzydzkyvU8f2rv33Ralv9+C9bsvrLsWDRjkuDDTfoZqeXplcTc73Ln0bsHGwWfxLlNE4SETsiYucd1jH/7GDLbbePfwWtn7Zt1a8jnsmP/3I0xF9KWs5PTr54eOrQxMaozO2fKM+KW/3864U3W9W/qvi7IDv+m5ue/9fjH002RiyePXeyNl+72HkdF/74vOU1TYfn/9Gtxfk/nLxdWzFcbPhoemnpzGTEcPL6reunbjxbmS/LZ/Hv29u8/2+LG3visYjYFRG7I+Lx7KKwaPsTEfFkROxdIf4fX3nq/c7jX5+50iz+2dsd/6g//p0nBk7+8O3t498YEa2O/8Faal+xpp3Xv3YbuJp9BwAAAPeK/DPwSTp+PZ2m4+P5Z/i3x+a0srC49NzxhQ9Pz+aflR+NobS80zVSdz90srg3XOanGvIHivvGXw5squXHZxYqs70OHvrclhb9P/PnQK9bB6y5LsyjAfco/R/6l/4P/SnR/6Gv6f/Qv5r1/09alh7/Zk0bA6wr7//Qv9ro/8v5Q+tRAXBv8v4P/Uv/h77U8rvx6aq+8r/uiX+L3zO8W9pz/ycivSuacf8nBtv+MYsOEtWRvP9nazY0LdPrVyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDu+C8AAP//F0nluw==") chdir(&(0x7f0000000400)='./file0\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000, 0x1) link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') open(&(0x7f00000000c0)='./file1\x00', 0x147842, 0x88) 11m4.437897523s ago: executing program 8 (id=1444): prctl$PR_SET_IO_FLUSHER(0x39, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000002140)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff0200}]}) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000200)={[{@jqfmt_vfsold}, {@max_batch_time={'max_batch_time', 0x3d, 0x1}}, {@debug}, {@noload}, {@nombcache}, {@noblock_validity}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}]}, 0x1, 0x46c, &(0x7f0000000f00)="$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") chdir(&(0x7f0000000400)='./file0\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=@ipv6_getaddrlabel={0x30, 0x1a, 0x1, 0x0, 0x0, {}, [@IFAL_ADDRESS={0x14, 0x1, @private0}]}, 0x30}}, 0x0) r1 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1a0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r2 = getpid() sched_setaffinity(r2, 0x8, &(0x7f00000002c0)=0xc) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000004000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b5090000010000007baaf0ff00000000bf2700000000000007080000fffdffffbfa400000000000007040000f0ffffff740200000800000018220000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000007e9500000000000056080000000000008500000005000000b70000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000, 0x1) link(&(0x7f0000001240)='./file0\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') open(&(0x7f00000000c0)='./file1\x00', 0x147842, 0x88) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x32d800, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', r6, &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={r1}, 0x4) 11m0.175608209s ago: executing program 9 (id=1451): r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002480)={0x2020}, 0x2020) syz_open_dev$tty1(0xc, 0x4, 0x1) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r4, &(0x7f00000001c0)={0x1f, @none, 0x1}, 0xa) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0x10, &(0x7f0000000300)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 11m0.11002123s ago: executing program 8 (id=1452): prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000000000800000"], 0x48) syz_extract_tcp_res(&(0x7f0000000000)={0x41424344}, 0xffffffff, 0xd) syz_emit_ethernet(0x4a, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffff2cbf92ffffff86dd600000ff00140600fe8000000000000000000000000000bbfe8800000000000000000000000000aa00", @ANYRES32=0x41424344, @ANYRES32=r3, @ANYBLOB="50d900009078ffff"], 0x0) syz_emit_ethernet(0x1162, &(0x7f0000002c80)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYRES32=0x41424344, @ANYBLOB="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"], 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r4, &(0x7f0000001ac0)={0x0, 0x600, &(0x7f0000000440)={&(0x7f0000001940)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="01dfffffff9a2600000021"], 0x20}, 0x1, 0x0, 0x0, 0x4000c00}, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000080), 0x70, 0x101301) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYBLOB="000000000000001d8fb91a4d7389f94db0489ef8", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) 10m56.31351738s ago: executing program 8 (id=1457): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x2}, 0x8) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) creat(0x0, 0x3e) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x14) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x600, 0x0, 0x27, 0x0, 0x0, 0x0) setpriority(0x1, 0x0, 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f030005000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) sendto$inet6(r0, &(0x7f0000000080)="be", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) shutdown(r0, 0x1) 10m53.905583071s ago: executing program 9 (id=1462): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x2}, 0x8) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) creat(0x0, 0x3e) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x14) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x600, 0x0, 0x27, 0x0, 0x0, 0x0) setpriority(0x1, 0x0, 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f030005000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) sendto$inet6(r0, &(0x7f0000000080)="be", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) shutdown(r0, 0x1) 10m53.742842013s ago: executing program 8 (id=1463): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b70300000000000085000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x0, &(0x7f0000000340)}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r6, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x8840) connect$inet6(r5, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000100)=0xcf5) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x2400000, 0x0, 0x0, 0x10, "00f8fffffffffffffff7ffffff00"}) r7 = syz_open_pts(r1, 0x121500) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000280)=0x3) 10m49.381576341s ago: executing program 9 (id=1467): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b70300000000000085000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x0, &(0x7f0000000340)}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r7, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x8840) connect$inet6(r6, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000100)=0xcf5) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x2400000, 0x0, 0x0, 0x10, "00f8fffffffffffffff7ffffff00"}) r8 = syz_open_pts(r1, 0x121500) ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000000280)=0x3) 10m48.202139856s ago: executing program 9 (id=1469): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x679fd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) r5 = accept4$unix(r2, 0x0, 0x0, 0x81000) ioctl$TCFLSH(r4, 0x5608, 0x0) sendmsg$nl_route(r0, 0x0, 0x884) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000380), 0x101bf) r7 = socket$nl_generic(0x10, 0x3, 0x10) io_uring_enter(r5, 0x4807, 0x6aec, 0x0, &(0x7f0000000180)={[0x9]}, 0x8) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x2a, &(0x7f0000000040)={0x6, {{0xa, 0x4e23, 0xf, @dev={0xfe, 0x80, '\x00', 0x30}, 0x4}}}, 0x88) sendmsg$DEVLINK_CMD_RATE_NEW(r7, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002740)={&(0x7f0000002400)={0x34, r8, 0x301, 0x0, 0x0, {0x17}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x34000804}, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000000)={0x0, 0x2, 0x39, 0x2}) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000fff000/0x1000)=nil) 10m44.08240836s ago: executing program 9 (id=1473): r0 = syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) ioctl$int_in(r0, 0x5452, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) clock_gettime(0x0, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0xf8, r2, 0x1, 0x5, 0x6, @multicast}, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x64, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x64}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x38, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r7, 0x6984f49faebfc218, 0x0) 10m42.361264963s ago: executing program 9 (id=1474): prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = fsmount(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_procs(r3, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x414, &(0x7f0000000200)=ANY=[], 0x1, 0x2bb, &(0x7f0000000440)="$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") mkdir(&(0x7f0000000000)='./control\x00', 0x0) r4 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) mkdirat(r4, &(0x7f0000000100)='./control\x00', 0x0) unlinkat(r4, &(0x7f0000000140)='./control\x00', 0x200) recvmmsg(r2, &(0x7f0000000c00)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000980)=""/143, 0x8f}, {&(0x7f0000000380)=""/94, 0x5e}, {0x0}, {&(0x7f0000000b00)=""/194, 0xc2}], 0x4, &(0x7f00000007c0)=""/111, 0x6f}, 0x4d9a}], 0x1, 0x10003, &(0x7f0000000c40)={0x77359400}) rmdir(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) 10m38.619965831s ago: executing program 38 (id=1463): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b70300000000000085000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x0, &(0x7f0000000340)}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r6, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x8840) connect$inet6(r5, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000100)=0xcf5) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x2400000, 0x0, 0x0, 0x10, "00f8fffffffffffffff7ffffff00"}) r7 = syz_open_pts(r1, 0x121500) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000280)=0x3) 10m26.342416172s ago: executing program 39 (id=1474): prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = fsmount(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_procs(r3, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x414, &(0x7f0000000200)=ANY=[], 0x1, 0x2bb, &(0x7f0000000440)="$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") mkdir(&(0x7f0000000000)='./control\x00', 0x0) r4 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) mkdirat(r4, &(0x7f0000000100)='./control\x00', 0x0) unlinkat(r4, &(0x7f0000000140)='./control\x00', 0x200) recvmmsg(r2, &(0x7f0000000c00)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000980)=""/143, 0x8f}, {&(0x7f0000000380)=""/94, 0x5e}, {0x0}, {&(0x7f0000000b00)=""/194, 0xc2}], 0x4, &(0x7f00000007c0)=""/111, 0x6f}, 0x4d9a}], 0x1, 0x10003, &(0x7f0000000c40)={0x77359400}) rmdir(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) 5m39.222040332s ago: executing program 4 (id=2154): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) r1 = syz_io_uring_setup(0x4e3, &(0x7f0000000280)={0x0, 0xc, 0x10100}, &(0x7f0000000240)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r1, 0x708, 0x41e3, 0x0, 0x0, 0x0) write(r0, &(0x7f0000000040)="09000000010000", 0x7) 5m38.908349587s ago: executing program 4 (id=2157): ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r0, 0x400448e6, 0x0) ioctl$sock_bt_hci(r0, 0x400448e6, &(0x7f0000000500)="d7") ioctl$sock_bt_hci(r0, 0x400448e7, &(0x7f0000000080)) 5m38.770407928s ago: executing program 4 (id=2158): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes256\x00'}, 0x58) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) 5m38.62457219s ago: executing program 4 (id=2160): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fffffff}]}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x1fd, 0x1, 0x0, 0x2000, &(0x7f0000bd3000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4048aecb, &(0x7f00000000c0)) close_range(r0, 0xffffffffffffffff, 0x0) 5m38.334463194s ago: executing program 4 (id=2162): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, 0x0) 5m38.162188276s ago: executing program 4 (id=2164): ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(0xffffffffffffffff, 0x80045301, &(0x7f0000000500)) r0 = socket$alg(0x26, 0x5, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec85"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) r2 = accept4(r0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(0xffffffffffffffff, 0x2ded, 0x4000, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r2, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) 5m22.870404867s ago: executing program 40 (id=2164): ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(0xffffffffffffffff, 0x80045301, &(0x7f0000000500)) r0 = socket$alg(0x26, 0x5, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec85"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) r2 = accept4(r0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(0xffffffffffffffff, 0x2ded, 0x4000, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r2, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) 5m15.477962453s ago: executing program 1 (id=2226): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r1, 0x29, 0x7, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x9, &(0x7f00000000c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$dsp1(0xffffff9c, &(0x7f00000001c0), 0x30002, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ftruncate(r2, 0x1000) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r6, &(0x7f0000000140)={0x2, 0x4e22, @multicast2}, 0x10) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) shutdown(r6, 0x1) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0xd4, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './file0'}}], [], 0x2c}) getsockopt$bt_hci(r2, 0x0, 0x3, &(0x7f0000003000)=""/4086, &(0x7f0000000180)=0xff6) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000001a00010001000000fedbdf250a00"/28], 0x1c}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x20400, 0x0) 5m13.872507984s ago: executing program 1 (id=2228): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x28, r1, 0x5, 0xffffffff, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_POWER_MODE={0x8, 0x1a, 0x2}]}]}, 0x28}}, 0x40800) 5m13.174080724s ago: executing program 1 (id=2230): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000200)={0x2a, 0x1}, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xd, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x37) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000100)='.\x00', &(0x7f0000000000)='exfat\x00', 0x8000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0xa000) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x1410, 0x1280, 0x150, 0x150, 0x0, 0xf8010000, 0x1348, 0x238, 0x238, 0x1348, 0x238, 0x3, 0x0, {[{{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'team_slave_0\x00', 'hsr0\x00', {}, {}, 0x84}, 0x0, 0x1218, 0x1280, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x1, 0x1, './cgroup.net/syz0\x00', 0x1000000, {0x8}}}, @common=@inet=@sctp={{0x144}, {[], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000], 0x6, [], 0x0, 0x6}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @mcast1, [0x0, 0x0, 0x0, 0xffffffff], [], 'batadv_slave_0\x00', 'gre0\x00', {}, {}, 0x87}, 0x0, 0xa4, 0xc8}, @common=@inet=@SYNPROXY={0x24}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x146c) syz_io_uring_submit(0x0, 0x0, 0x0) write$rfkill(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="03010000b5"], 0xc8) r5 = syz_io_uring_setup(0x10f, &(0x7f0000001940)={0x0, 0x7e90, 0x1000, 0x3, 0x11}, &(0x7f0000000180)=0x0, &(0x7f0000000340)=0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, &(0x7f0000000040)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}) io_uring_enter(r5, 0x3512, 0x9d5c, 0x4, 0x0, 0x0) 5m10.920623513s ago: executing program 1 (id=2233): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = syz_open_dev$sndmidi(&(0x7f00000002c0), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$ptmx(0xffffffffffffff9c, 0x0, 0x80, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0xf) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x2000, 0x1) mknod$loop(&(0x7f00000002c0)='./file1\x00', 0x2000, 0x0) write$FUSE_NOTIFY_RETRIEVE(r1, 0x0, 0x0) r2 = io_uring_setup(0x17fb, &(0x7f0000000440)={0x0, 0x0, 0x80, 0x8000}) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x40}, 0x1, 0x0, 0x0, 0x20000850}, 0x4c000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x80800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r7 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r7, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x120000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x58, 0x1411, 0x2, 0x70bd27, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x2}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x3b}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x8011}, 0x2400c810) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x48980, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 5m5.405532735s ago: executing program 1 (id=2244): openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = getpid() syz_pidfd_open(r0, 0x0) prlimit64(r0, 0xc, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r1, 0x0) setpgid(0x0, r1) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000240), 0x10000, &(0x7f0000000440)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@smackfsfloor={'smackfsfloor', 0x3d, '/proc/sys/net/ipv4/vs/ignore_tunneled\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '$]*^.}'}}, {@context={'context', 0x3d, 'unconfined_u'}}]}}) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xa, 0x1000, 0x3fd, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000001c0)=@generic={&(0x7f00000000c0)='./file0/file0\x00', r2}, 0x18) mlockall(0x2) bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)=@generic={&(0x7f0000000440)='./file0/file0\x00'}, 0x18) mount$afs(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x88, 0x0) r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_READY(r3, 0x9360, 0x800000000000001) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r4, 0x4038ae7a, 0x0) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x113100, 0x0) ioctl$FS_IOC_GETFLAGS(r5, 0x80086601, &(0x7f0000000300)) 5m4.859629032s ago: executing program 1 (id=2249): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0xd5) openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) 4m49.127366519s ago: executing program 41 (id=2249): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0xd5) openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) 9.64095256s ago: executing program 0 (id=3462): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000040000000400000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000000800000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x4002000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 9.348250153s ago: executing program 2 (id=3464): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020000000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000440)=ANY=[], 0x0) 8.17867512s ago: executing program 0 (id=3467): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r4, r1, 0x25, 0x2, @val=@tcx={@void, @value}}, 0x1c) 8.048907651s ago: executing program 5 (id=3469): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=@newtaction={0x248, 0x30, 0x1, 0x70bd2b, 0xffffffff, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7b, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x10000000}}}]}, {0x4}, {0xc}, {0xc}}}]}, {0x1a4, 0x1, [@m_xt={0x1a0, 0x10, 0x0, 0x0, {{0x7}, {0xcc, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xae, 0x6, {0x4, 'mangle\x00', 0x3, 0x4, "a5a28d64939539088f40bec7bf2a9a09ddeeb8b21fcaa12de096e469eabc81b25e072661500e7d846289bf3f252a9086b0cbcdf78a4fb31012ee38d436d4455a23bcf672b444b5d9518798dfe456290efc7933793d118d0517003b625570ba2ef0f25ab16aba7472995a800886ade23c88d0b5a48f0a7893da8d527cacb47eb0d9a94129"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_INDEX={0x8, 0x3, 0x20009}, @TCA_IPT_HOOK={0x8}]}, {0xae, 0x6, "4b69c19d9e1a6acd8dbc33bad19b1e40b7c5619a3c9843b600b86cee1756bb5c61a134474f392bb3bad817b7c80bf5dab1ca1ad9dd0fa190ab179231fcca7120d0fccc0c2863d566bb309fa4bfad881920dd51facc45fdec6598ceddbf289a961f4d7532b0dbbb4d12a5e021c8b44d291961ea00ad80c67d9178a7e553a1abd22fbb64978537785a63e855b3c7fa2a15dcb498f7aeeb8b9e52414717d9d120fa39ef630b925775063ca6"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}, 0x248}, 0x1, 0x0, 0x0, 0x48810}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = syz_open_dev$hidraw(&(0x7f0000002300), 0x1, 0x14a042) socket(0x29, 0x80805, 0x0) ioctl$HIDIOCGRDESC(r0, 0x4030582a, &(0x7f0000000200)={0xd, "7954bbc8e80000000000000001"}) r1 = getpid() ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r4, 0xffffffffffffffff, 0x0) r5 = fsopen(&(0x7f00000002c0)='pstore\x00', 0x1) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f0000000380)=':\x00', 0x0, 0xffffffffffffffff) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty}, 0x1c) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) open(&(0x7f00000003c0)='./file0\x00', 0x10241, 0x0) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000001000000000000006c000500010006000000240007800800"], 0x6c}}, 0x0) add_key(&(0x7f0000000240)='cifs.spnego\x00', &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) setreuid(0xffffffffffffffff, 0xee00) pipe(&(0x7f0000000080)={0xffffffffffffffff}) ioctl$int_in(r8, 0x5452, &(0x7f0000000180)=0x48000) 7.847339204s ago: executing program 0 (id=3470): fsopen(&(0x7f00000003c0)='jfs\x00', 0x1) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x10, &(0x7f0000001280), 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000240)=@assoc_value, &(0x7f00000002c0)=0x8) dup(0xffffffffffffffff) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="051653f317bbfdcec122308ca0fe11d3ca77af8fcbb9064782ea5843a57a1dad51e711723a0a47b87ef8d12f9e7bd43a7f2c28872cf50fec5f36f0a47ea8929c56f2a3596d16a283ca3a8d12be2d155bf882946318e9e97c3fea436ec6b2402aed373fb0156c0ac7673f9c4c0b78cc871dade3ca2b754c5ad3ff3ec30d46a267f1379bb30bdf200720269e9f17c34a5439fa4c10b14642896cb81195a63bf96b1e87a2fcfea88e40d03440647f84ffe40c5fd5dc3576b49586d561545c5b564aac4b3b3c27721c7a"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setgroups(0x0, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="15cd46fd93effd4df83734115592024a6014ba5d317112b05534839b254534d7f414", 0x22, 0x0, 0x0, 0x0) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000001200)="a912", 0x2}], 0x1}, 0x20000801) recvmsg(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x40002002) 7.176054273s ago: executing program 5 (id=3482): r0 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0xfffffffc, @local, 0x2}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000480)='net/icmp6\x00') preadv(r2, &(0x7f0000000080)=[{0x0}], 0x1, 0x14a, 0x0) 6.446339822s ago: executing program 2 (id=3474): syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000140)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd74) epoll_create1(0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = creat(0x0, 0x4e) close(r3) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r5 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2) ftruncate(r5, 0x1000006) fcntl$addseals(r5, 0x409, 0x7) ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f0000000000)={r5, 0x0, 0x0, 0x1000000}) 6.040926198s ago: executing program 0 (id=3475): fsopen(&(0x7f00000000c0)='ceph\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000003000000040122000b00000001000000", @ANYRES32, @ANYRES8, @ANYRES32=0x0, @ANYRES32], 0x48) r0 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(r0, 0x40045108, &(0x7f0000001b80)) setrlimit(0x1, &(0x7f0000000380)={0x1, 0x713}) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r1 = openat$kvm(0xffffff9c, &(0x7f0000000240), 0x20000, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x32315258, 0x0, 0x6, [{0x0, 0x1000000}, {0x12, 0xd5a}, {0x4000000}, {0x100}, {0x0, 0x7}, {0x0, 0x9}, {}, {0x0, 0xc}], 0x20}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) 6.031051168s ago: executing program 5 (id=3486): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r5, 0x4010ae68, &(0x7f0000000100)={0x2, 0x1d000, 0x1}) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) setxattr$security_ima(&(0x7f0000000180)='./bus\x00', &(0x7f0000000000), &(0x7f0000000100)=ANY=[@ANYBLOB="043a8d79fe27"], 0xffd7, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) setsockopt$sock_timeval(r0, 0x1, 0x2, 0x0, 0x300) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r6, &(0x7f0000000040)={0x24, @short={0x2, 0x1, 0xaaa0}}, 0x14) 5.218259269s ago: executing program 6 (id=3477): bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0100000004000000cc", @ANYRESOCT, @ANYRES16, @ANYRES16, @ANYRES8, @ANYBLOB='\x00'/28], 0x50) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x27) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) openat$cgroup_subtree(r3, &(0x7f0000000100), 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f00000012c0)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f0000001180)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket(0x1, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12) r6 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000001280)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0x2, r6, &(0x7f00000000c0)=""/4096, 0x1000) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, 0x0, &(0x7f0000000140)=@secondary) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2) io_uring_enter(0xffffffffffffffff, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000040)=0xd) write$binfmt_aout(r7, &(0x7f0000000940)=ANY=[], 0xff2e) ioctl$TCFLSH(r7, 0x540b, 0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x16b601, 0x0) 5.15863792s ago: executing program 3 (id=3478): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd0, &(0x7f0000000240)=0xa4, 0x4) 4.834559704s ago: executing program 3 (id=3479): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x24, 0x2, 0x1, 0x801, 0x0, 0x0, {0x5, 0x0, 0xa}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2000}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x54}]}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x40000) 4.42033391s ago: executing program 3 (id=3480): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r4, r1, 0x25, 0x2, @val=@tcx={@void, @value}}, 0x1c) 4.253785702s ago: executing program 0 (id=3481): fsopen(&(0x7f00000000c0)='ceph\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x40045108, &(0x7f0000001b80)) setrlimit(0x1, &(0x7f0000000380)={0x1, 0x713}) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='dctcp\x00', 0x6) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000240), 0x20000, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_bt_hci(r3, 0x400448e1, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 3.951314726s ago: executing program 6 (id=3483): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='pids.current\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x20) ftruncate(r0, 0x101) 3.338264934s ago: executing program 6 (id=3484): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bic\x00', 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 3.337542535s ago: executing program 3 (id=3495): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r4, r1, 0x25, 0x2, @val=@tcx={@void, @value}}, 0x1c) 3.228104536s ago: executing program 0 (id=3485): socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0x0, &(0x7f0000000100)='mountstats\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20008004, &(0x7f0000000180)={0xa, 0x4e20, 0xc, @private2, 0x10000007}, 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) r3 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000280)={{0x5}, 'syz1\x00', 0x10}) ioctl$UI_DEV_CREATE(r3, 0x5501) ioctl$UI_DEV_DESTROY(r3, 0x5502) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000dc0), r4) sendmsg$IEEE802154_START_REQ(r5, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000e00)={0x2c, r6, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x1}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa3}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0xf}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000081}, 0x880) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f00000001c0)=ANY=[@ANYBLOB="64796e2c0069e37bf4b94eeacd224739b537"]) lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0xb) 3.108614248s ago: executing program 2 (id=3487): setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000640)="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", 0x19f) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000040)={0x0, 0x0, 0x7, &(0x7f00000008c0)={0x7, "cc3df0b97c31c635d41f1db17008852daa53915d105cea6345c0bd492ca56f24ee"}}) 3.042318878s ago: executing program 3 (id=3488): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$sock(r0, &(0x7f0000000cc0)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @broadcast, 0x3}, 0x80, 0x0}}, {{&(0x7f0000000700)=@in6={0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, '\x00', 0x18}, 0x60}, 0x80, 0x0}}], 0x2, 0x48094) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0xffffffff000) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x6, @empty, 0x10001, 0x3}, 0x80) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r2) r3 = socket(0x23, 0x80002, 0x10000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010e7010000000000000000000000000a20000000000a03000000000000000000070000000c00044000000000000000021c000000090a010400000000000000000700000008000a4000000003"], 0x64}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000d0425bd7000fcdbff2500000000", @ANYRES32=0x0, @ANYBLOB="1000000000c600001c0012800b00010062726964676500000c000280080013"], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg$alg(r3, &(0x7f00000000c0), 0x492492492492627, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 3.025059419s ago: executing program 6 (id=3489): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000040000000400000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000000800000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x4002000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.721688987s ago: executing program 6 (id=3490): socket$nl_route(0x10, 0x3, 0x0) socket$rxrpc(0x21, 0x2, 0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd74) r2 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x7079, 0x0, 0x14, 0x28b, 0x0, r1}, &(0x7f0000000140)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_setup(0x6, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) write$UHID_DESTROY(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x558410e9) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) 1.547603849s ago: executing program 2 (id=3491): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd0, &(0x7f0000000240)=0xa4, 0x4) 1.250417953s ago: executing program 2 (id=3492): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x24, 0x2, 0x1, 0x801, 0x0, 0x0, {0x5, 0x0, 0xa}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2000}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x54}]}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x40000) 909.725687ms ago: executing program 5 (id=3493): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000002380)='net/ip_mr_cache\x00') pread64(r2, &(0x7f0000000100)=""/253, 0xfd, 0xadc) 773.971559ms ago: executing program 2 (id=3494): bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0100000004000000cc", @ANYRESOCT, @ANYRES16, @ANYRES16, @ANYRES8, @ANYBLOB='\x00'/28], 0x50) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x27) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) openat$cgroup_subtree(r3, &(0x7f0000000100), 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f00000012c0)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f0000001180)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket(0x1, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12) r6 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000001280)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0x2, r6, &(0x7f00000000c0)=""/4096, 0x1000) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, 0x0, &(0x7f0000000140)=@secondary) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2) io_uring_enter(0xffffffffffffffff, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000040)=0xd) write$binfmt_aout(r7, &(0x7f0000000940)=ANY=[], 0xff2e) ioctl$TCFLSH(r7, 0x540b, 0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x16b601, 0x0) 298.859916ms ago: executing program 3 (id=3496): fsopen(&(0x7f00000000c0)='ceph\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000003000000040122000b00000001000000", @ANYRES32, @ANYRES8, @ANYRES32=0x0, @ANYRES32], 0x48) r0 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(r0, 0x40045108, &(0x7f0000001b80)) setrlimit(0x1, &(0x7f0000000380)={0x1, 0x713}) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r1 = openat$kvm(0xffffff9c, &(0x7f0000000240), 0x20000, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x32315258, 0x0, 0x6, [{0x0, 0x1000000}, {0x12, 0xd5a}, {0x4000000}, {0x100}, {0x0, 0x7}, {0x0, 0x9}, {}, {0x0, 0xc}], 0x20}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) 296.384406ms ago: executing program 6 (id=3506): mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000100)='./file1\x00', &(0x7f0000000180), 0x808412, &(0x7f0000000280)={'trans=virtio,', {[{@msize={'msize', 0x3d, 0x8001}}]}}) socket$inet6(0xa, 0x2, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xb7, &(0x7f0000000140)=""/183, 0x41000, 0x43, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) readv(r1, &(0x7f00000018c0)=[{&(0x7f0000000840)=""/4096, 0x1000}], 0x1) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000f40)=@filter={'filter\x00', 0x4, 0x4, 0x3b0, 0xffffffff, 0x0, 0xe4, 0xe4, 0xfeffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa4, 0xe4}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x4}}}, {{@ipv6={@private2, @empty, [], [], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0xec, 0x110, 0x0, {}, [@common=@dst={{0x48}, {0x80000}}]}, @REJECT={0x24, 'REJECT\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0xd0, 0xf4, 0x0, {}, [@common=@unspec=@realm={{0x2c}, {0x1, 0xdd8}}]}, @REJECT={0x24}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x40c) r6 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r6, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r6, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x800, 0x7, 0x1, 0x1, 0xd59f80, 0x19ef, 0x7, 0x19ef, 0x3, 0x6, 0x27ff, 0x2800, 0xffffffff, 0xbb5, 0x30, 0x8, {0x8, 0xffffffff}, 0xd0, 0x9}}) pipe2(&(0x7f0000001cc0), 0x800) 295.821196ms ago: executing program 5 (id=3497): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='pids.current\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x20) ftruncate(r0, 0x101) 0s ago: executing program 5 (id=3498): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) kernel console output (not intermixed with test programs): _1) entered disabled state [ 983.533871][ T4309] device bridge_slave_0 left promiscuous mode [ 983.559363][ T4309] bridge0: port 1(bridge_slave_0) entered disabled state [ 984.327789][ T4309] team0 (unregistering): Port device team_slave_1 removed [ 984.378439][ T4309] team0 (unregistering): Port device team_slave_0 removed [ 984.415381][ T4309] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 984.485773][ T4309] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 985.107968][ T4309] bond0 (unregistering): Released all slaves [ 985.521660][ T4309] team0 (unregistering): Port device team_slave_1 removed [ 985.584792][ T4309] team0 (unregistering): Port device team_slave_0 removed [ 985.624219][ T4309] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 985.654736][ T4309] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 986.477189][ T4309] bond0 (unregistering): Released all slaves [ 986.629252][T11243] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 986.637656][T11243] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 986.705519][T11243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 986.815281][T11243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 986.848181][T11243] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 986.898785][T11243] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 986.915462][T11587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 986.927581][T11587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 986.941437][T11587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 986.953214][T11587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 986.966711][T11587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 986.990901][T11587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 987.002789][T11587] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 987.017842][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 987.065194][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 987.076914][T11587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 987.108760][T11587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 987.137706][T11587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 987.158903][T11587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 987.177778][T11587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 987.212854][T11587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 987.241835][T11587] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 987.272913][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 987.293184][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 987.328746][T11587] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 987.353970][T11587] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 987.372360][T11587] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 987.389131][T11587] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 987.562749][T12059] loop1: detected capacity change from 0 to 512 [ 987.616609][T12059] EXT4-fs: quotafile must be on filesystem root [ 987.686271][T11725] 8021q: adding VLAN 0 to HW filter on device bond0 [ 987.726368][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 987.778562][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 987.821533][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 987.853794][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 987.878813][T11725] 8021q: adding VLAN 0 to HW filter on device team0 [ 987.948693][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 988.039708][T11757] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 988.124612][T11757] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 988.201113][T11757] bridge0: port 1(bridge_slave_0) entered blocking state [ 988.208614][T11757] bridge0: port 1(bridge_slave_0) entered forwarding state [ 988.357209][T11757] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 988.378407][T11757] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 988.389774][T11757] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 988.398086][T11243] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 988.408317][T11757] bridge0: port 2(bridge_slave_1) entered blocking state [ 988.415515][T11757] bridge0: port 2(bridge_slave_1) entered forwarding state [ 988.424136][T11243] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 988.438198][T11757] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 988.451495][T11757] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 988.502665][T11757] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 988.556661][T11757] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 988.586425][T11757] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 988.621473][T11757] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 988.644606][T11757] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 988.667762][T11757] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 988.685296][T11757] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 988.696536][T11757] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 988.711580][T11757] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 988.744471][T11757] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 988.795337][T11725] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 991.259088][ T952] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 991.566476][T12086] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1735'. [ 991.731838][ T952] usb 4-1: device descriptor read/64, error -71 [ 993.348105][T12099] hub 2-0:1.0: USB hub found [ 993.353197][T12099] hub 2-0:1.0: 1 port detected [ 993.369759][T12099] loop3: detected capacity change from 0 to 1024 [ 993.409354][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.415772][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 994.423982][T12099] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 994.498394][T11243] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 994.512484][T11243] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 994.565807][T11725] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 994.655259][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 994.691121][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 994.766779][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 994.796020][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 994.837161][T11725] device veth0_vlan entered promiscuous mode [ 994.860371][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 994.894851][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 994.939861][T11725] device veth1_vlan entered promiscuous mode [ 995.043234][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 995.069855][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 995.098585][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 995.147666][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 995.184810][T11725] device veth0_macvtap entered promiscuous mode [ 995.214879][T11725] device veth1_macvtap entered promiscuous mode [ 995.304014][T11725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 995.346821][T11725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 995.365492][T11725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 995.456891][T11725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 995.466829][T11725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 995.477325][T11725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 995.487208][T11725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 995.511457][T11725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 995.528380][T11587] EXT4-fs (loop3): unmounting filesystem. [ 995.648470][T11725] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 995.657426][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 995.680589][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 995.731317][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 996.281280][ T26] audit: type=1326 audit(1746027404.736:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12121 comm="syz.3.1740" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0fb018e969 code=0x0 [ 996.909887][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 998.322334][T11725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 998.378974][T11725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 998.420624][T11725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 998.448023][T11725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 998.943452][T12150] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1747'. [ 999.508560][T11725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 999.776660][T11725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 999.797401][T11725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 999.849793][T11725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 999.864018][T11725] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 999.876403][T11725] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1000.014494][T11725] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1000.023928][T11725] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1000.046335][T11725] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1000.067645][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1000.207763][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1000.847271][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1000.865971][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1000.906494][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1001.118472][T12169] hub 2-0:1.0: USB hub found [ 1001.123478][T12169] hub 2-0:1.0: 1 port detected [ 1001.140030][T12169] loop1: detected capacity change from 0 to 1024 [ 1001.213657][T12169] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1001.921947][T10081] EXT4-fs (loop1): unmounting filesystem. [ 1002.051658][ T4435] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1002.065869][ T4435] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1002.248658][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1003.324037][T12189] loop3: detected capacity change from 0 to 512 [ 1003.435180][T12189] EXT4-fs: quotafile must be on filesystem root [ 1005.609217][ T4332] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 1005.879199][ T4332] usb 3-1: device descriptor read/64, error -71 [ 1006.100085][T12215] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1759'. [ 1006.319584][ T4332] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 1006.469533][ T4332] usb 3-1: device descriptor read/64, error -71 [ 1006.848580][ T4332] usb usb3-port1: attempt power cycle [ 1007.237300][T12224] loop1: detected capacity change from 0 to 512 [ 1007.287739][T12224] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 1007.347846][T12224] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 1007.431067][T12224] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2195: inode #15: comm syz.1.1762: corrupted in-inode xattr [ 1007.514448][T12224] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.1762: couldn't read orphan inode 15 (err -117) [ 1007.546803][T12224] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1007.563532][T12230] loop3: detected capacity change from 0 to 512 [ 1007.798443][T12230] EXT4-fs: quotafile must be on filesystem root [ 1010.285768][T12239] hub 2-0:1.0: USB hub found [ 1010.290724][T12239] hub 2-0:1.0: 1 port detected [ 1010.313933][T12239] loop5: detected capacity change from 0 to 1024 [ 1010.558485][T12239] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1010.773263][T10081] EXT4-fs (loop1): unmounting filesystem. [ 1010.896810][ T4941] EXT4-fs (loop5): unmounting filesystem. [ 1011.859111][T12258] loop2: detected capacity change from 0 to 512 [ 1011.985071][T12258] EXT4-fs: quotafile must be on filesystem root [ 1012.183891][T12265] loop5: detected capacity change from 0 to 16 [ 1012.246882][T12267] loop1: detected capacity change from 0 to 512 [ 1013.173310][T12265] erofs: (device loop5): mounted with root inode @ nid 36. [ 1013.221732][T12267] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 1013.785798][T12267] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 1013.829832][T12267] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2195: inode #15: comm syz.1.1772: corrupted in-inode xattr [ 1013.887528][T12267] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.1772: couldn't read orphan inode 15 (err -117) [ 1014.133267][T12281] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1773'. [ 1016.287153][T12267] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1016.641751][T10081] EXT4-fs (loop1): unmounting filesystem. [ 1016.968876][T12300] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1016.980759][T12300] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1019.366378][T12321] hub 2-0:1.0: USB hub found [ 1019.372064][T12321] hub 2-0:1.0: 1 port detected [ 1019.574193][T12324] loop3: detected capacity change from 0 to 512 [ 1019.581542][T12324] EXT4-fs: quotafile must be on filesystem root [ 1019.631557][T11483] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1020.346352][T12334] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1786'. [ 1020.391639][T12332] program syz.5.1784 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1021.509771][T12343] hub 2-0:1.0: USB hub found [ 1021.515358][T12343] hub 2-0:1.0: 1 port detected [ 1021.809538][T12340] loop3: detected capacity change from 0 to 1024 [ 1025.344974][T12340] EXT4-fs: failed to create workqueue [ 1025.352406][T12340] EXT4-fs (loop3): mount failed [ 1027.116063][T12356] loop2: detected capacity change from 0 to 512 [ 1027.364894][T12356] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 1027.494008][T12356] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 1027.524910][T12365] loop5: detected capacity change from 0 to 512 [ 1027.532731][T12365] EXT4-fs: quotafile must be on filesystem root [ 1027.553739][T12356] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2195: inode #15: comm syz.2.1791: corrupted in-inode xattr [ 1027.589623][T12356] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.1791: couldn't read orphan inode 15 (err -117) [ 1027.938635][T12356] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1028.087639][T12373] hub 2-0:1.0: USB hub found [ 1028.095661][T12373] hub 2-0:1.0: 1 port detected [ 1028.906798][T11725] EXT4-fs (loop2): unmounting filesystem. [ 1028.954356][T12378] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1797'. [ 1029.163465][T12383] loop1: detected capacity change from 0 to 512 [ 1029.179424][T12383] EXT4-fs: quotafile must be on filesystem root [ 1030.455042][T12391] loop2: detected capacity change from 0 to 512 [ 1030.477349][T12391] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 1030.551898][T12391] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 1030.579230][T12391] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2195: inode #15: comm syz.2.1799: corrupted in-inode xattr [ 1030.671214][T12391] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.1799: couldn't read orphan inode 15 (err -117) [ 1030.821262][T12391] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1031.216597][ T26] audit: type=1800 audit(1746027439.666:372): pid=12415 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1799" name="file1" dev="loop2" ino=20 res=0 errno=0 [ 1032.151455][T11725] EXT4-fs (loop2): unmounting filesystem. [ 1032.589361][ T4332] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 1032.949030][ T4332] usb 6-1: Using ep0 maxpacket: 16 [ 1032.956570][ T4332] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1032.975371][ T4332] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1033.018425][ T4332] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1033.395721][ T4332] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1033.830253][ T4332] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1033.838627][ T4332] usb 6-1: Product: syz [ 1033.844621][ T4332] usb 6-1: Manufacturer: syz [ 1033.849672][ T4332] usb 6-1: SerialNumber: syz [ 1035.080829][ T4332] usb 6-1: 0:2 : does not exist [ 1035.085823][ T4332] usb 6-1: unit 5 not found! [ 1035.149216][ T4332] usb 6-1: USB disconnect, device number 37 [ 1035.400262][T11483] udevd[11483]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1036.351349][ T26] audit: type=1326 audit(1746027444.796:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12463 comm="syz.5.1816" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8f65b8e969 code=0x0 [ 1037.352372][ T26] audit: type=1326 audit(1746027445.366:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12467 comm="syz.4.1817" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbce2b8e969 code=0x0 [ 1037.766589][T12481] loop2: detected capacity change from 0 to 512 [ 1037.811959][T12481] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 1038.165268][T12481] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 1038.387790][T12481] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2195: inode #15: comm syz.2.1819: corrupted in-inode xattr [ 1038.564919][T12481] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.1819: couldn't read orphan inode 15 (err -117) [ 1038.710117][T12481] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1039.648957][T12527] syz.4.1833 uses obsolete (PF_INET,SOCK_PACKET) [ 1039.782898][T12533] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1835'. [ 1039.831215][T12533] device bridge_slave_1 left promiscuous mode [ 1039.890720][T12533] bridge0: port 2(bridge_slave_1) entered disabled state [ 1040.073582][T12533] device bridge_slave_0 left promiscuous mode [ 1040.090894][T12533] bridge0: port 1(bridge_slave_0) entered disabled state [ 1040.173626][T12540] raw_sendmsg: syz.4.1838 forgot to set AF_INET. Fix it! [ 1041.971354][T12552] binder: 12551:12552 ioctl c018620c 200000000380 returned -22 [ 1042.014370][T12553] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1042.533029][T12553] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1042.937194][T12565] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1844'. [ 1043.966555][T11725] EXT4-fs (loop2): unmounting filesystem. [ 1045.217311][T12608] 9pnet_virtio: no channels available for device syz [ 1045.294969][ T4263] block nbd5: Receive control failed (result -107) [ 1045.296237][T12601] 9pnet_virtio: no channels available for device syz [ 1045.332280][T12606] block nbd5: shutting down sockets [ 1048.920660][T12667] mmap: syz.1.1862 (12667) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 1049.584732][T12689] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1873'. [ 1050.366780][ T11] Bluetooth: (null): Invalid header checksum [ 1050.400174][ T11] Bluetooth: (null): Invalid header checksum [ 1050.482422][ T11] Bluetooth: (null): Invalid header checksum [ 1050.546458][ T11] Bluetooth: (null): Invalid header checksum [ 1050.589421][ T11] Bluetooth: (null): Invalid header checksum [ 1050.690712][ T11] Bluetooth: (null): Invalid header checksum [ 1050.799367][ T4302] Bluetooth: (null): Invalid header checksum [ 1054.324142][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.330664][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.545784][T12750] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1889'. [ 1054.940824][ T26] audit: type=1326 audit(1746027463.396:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12755 comm="syz.4.1891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbce2b8e969 code=0x7ffc0000 [ 1055.049110][ T26] audit: type=1326 audit(1746027463.396:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12755 comm="syz.4.1891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbce2b8e969 code=0x7ffc0000 [ 1055.189050][ T26] audit: type=1326 audit(1746027463.436:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12755 comm="syz.4.1891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbce2b8e969 code=0x7ffc0000 [ 1055.344072][ T26] audit: type=1326 audit(1746027463.436:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12755 comm="syz.4.1891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbce2b8e969 code=0x7ffc0000 [ 1055.444565][ T26] audit: type=1326 audit(1746027463.436:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12755 comm="syz.4.1891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbce2b8e969 code=0x7ffc0000 [ 1055.569164][ T26] audit: type=1326 audit(1746027463.436:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12755 comm="syz.4.1891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbce2b8e969 code=0x7ffc0000 [ 1055.701650][ T26] audit: type=1326 audit(1746027463.436:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12755 comm="syz.4.1891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fbce2b8e969 code=0x7ffc0000 [ 1055.793132][ T26] audit: type=1326 audit(1746027463.436:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12755 comm="syz.4.1891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbce2b8e969 code=0x7ffc0000 [ 1055.894677][ T26] audit: type=1326 audit(1746027463.436:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12755 comm="syz.4.1891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fbce2b8e969 code=0x7ffc0000 [ 1056.068135][ T26] audit: type=1326 audit(1746027463.606:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12755 comm="syz.4.1891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbce2b8e969 code=0x7ffc0000 [ 1058.854914][T12825] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1059.582172][T12847] capability: warning: `syz.4.1917' uses deprecated v2 capabilities in a way that may be insecure [ 1061.363335][T12901] 9pnet_virtio: no channels available for device syz [ 1061.509066][ T4266] Bluetooth: hci0: command 0x0406 tx timeout [ 1063.426380][T12939] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1944'. [ 1063.497289][T12941] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1944'. [ 1063.541386][T12941] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1944'. [ 1064.842504][T12966] lo speed is unknown, defaulting to 1000 [ 1065.039144][T12963] siw: device registration error -23 [ 1071.281082][T11980] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1071.490452][T11980] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1071.536258][T11980] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1071.609234][T11980] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1071.658520][T11980] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1071.720463][T13079] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1071.749140][ T4263] Bluetooth: hci5: command 0x0406 tx timeout [ 1072.196829][T13079] lo speed is unknown, defaulting to 1000 [ 1076.821169][T13151] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1076.850824][ T8622] usb 2-1: USB disconnect, device number 5 [ 1077.035433][T13151] device batadv_slave_0 entered promiscuous mode [ 1080.992773][T13209] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 1081.582459][T13227] device macsec0 entered promiscuous mode [ 1082.295965][T13259] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2021'. [ 1083.347255][ T4263] Bluetooth: Unexpected continuation frame (len 4) [ 1083.366563][T13284] netlink: 268 bytes leftover after parsing attributes in process `syz.2.2029'. [ 1087.279180][ T4300] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 1087.479003][ T4300] usb 6-1: Using ep0 maxpacket: 16 [ 1087.488430][ T4300] usb 6-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1087.599325][ T4300] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1087.692971][ T4300] usb 6-1: Product: syz [ 1087.764015][ T4300] usb 6-1: Manufacturer: syz [ 1087.814795][ T4300] usb 6-1: SerialNumber: syz [ 1087.911322][ T4300] usb 6-1: config 0 descriptor?? [ 1087.911558][ T4263] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 1087.925277][ T4263] Bluetooth: hci4: Injecting HCI hardware error event [ 1087.934957][ T4266] Bluetooth: hci4: hardware error 0x00 [ 1088.227777][ T9184] usb 6-1: USB disconnect, device number 38 [ 1089.612294][T13409] usb usb8: usbfs: process 13409 (syz.1.2059) did not claim interface 0 before use [ 1089.761574][T13416] netlink: 'syz.4.2061': attribute type 12 has an invalid length. [ 1089.989195][ T4266] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1090.189097][ T4332] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 1090.391354][ T4332] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1090.443606][ T4332] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1090.529082][ T4332] usb 2-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 1090.561073][ T4332] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1090.629614][ T4332] usb 2-1: config 0 descriptor?? [ 1091.075071][ T4332] usbhid 2-1:0.0: can't add hid device: -71 [ 1091.084418][ T4332] usbhid: probe of 2-1:0.0 failed with error -71 [ 1091.118824][ T4332] usb 2-1: USB disconnect, device number 6 [ 1092.549167][ T8622] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1093.438970][ T8622] usb 2-1: Using ep0 maxpacket: 8 [ 1093.445886][ T8622] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1093.487667][ T8622] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1093.503340][ T8622] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1093.517257][ T8622] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1093.533679][ T8622] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1093.543046][ T8622] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1093.823736][ T8622] usb 2-1: GET_CAPABILITIES returned 0 [ 1093.836740][ T8622] usbtmc 2-1:16.0: can't read capabilities [ 1093.850660][T13476] binder: BINDER_SET_CONTEXT_MGR already set [ 1094.046742][T13476] binder: 13473:13476 ioctl 4018620d 200000000180 returned -16 [ 1094.207048][ T8622] usb 2-1: USB disconnect, device number 7 [ 1094.735640][T13493] binder: 13492:13493 ioctl 400c620e 200000000000 returned -22 [ 1095.102290][T13500] binder: 13498:13500 ioctl c0306201 200000000540 returned -14 [ 1096.037171][T13520] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2087'. [ 1096.359948][T13526] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2088'. [ 1096.729492][T13541] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2094'. [ 1096.738568][T13541] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2094'. [ 1096.799084][T13541] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2094'. [ 1098.910857][T13580] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2103'. [ 1099.127169][T13587] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2108'. [ 1099.145106][T13576] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2103'. [ 1099.170201][T13576] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2103'. [ 1099.212837][T13576] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2103'. [ 1100.209068][T13581] sp0: Synchronizing with TNC [ 1100.274611][T13617] fuse: Unknown parameter '0xffffffffffffffff0xffffffffffffffff' [ 1101.153931][T13613] tipc: Started in network mode [ 1101.173296][T13613] tipc: Node identity ac1414aa, cluster identity 4711 [ 1101.201689][T13613] tipc: Enabled bearer , priority 10 [ 1101.282201][T13637] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2121'. [ 1101.319268][T13637] IPv6: Can't replace route, no match found [ 1101.938164][T13661] loop4: detected capacity change from 0 to 524255232 [ 1102.321329][ T4332] tipc: Node number set to 2886997162 [ 1105.750606][T13725] syz.5.2144 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1106.528198][T13736] hub 2-0:1.0: USB hub found [ 1106.535503][T13736] hub 2-0:1.0: 1 port detected [ 1107.239236][ T9184] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 1107.669502][ T9184] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 1107.712853][ T9184] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1107.712886][T13756] netlink: 'syz.4.2150': attribute type 1 has an invalid length. [ 1107.973061][ T9184] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 10 [ 1108.181736][ T9184] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 134, setting to 64 [ 1108.219277][ T9184] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1108.246803][ T9184] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1108.263774][ T9184] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 10 [ 1108.325654][ T9184] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 134, setting to 64 [ 1108.387145][ T9184] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1108.427697][ T9184] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1108.448139][ T9184] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 10 [ 1108.502956][ T9184] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 134, setting to 64 [ 1108.523347][ T9184] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1108.541823][ T9184] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1108.552478][ T9184] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 10 [ 1108.574119][ T9184] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 134, setting to 64 [ 1108.595649][ T9184] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1108.618413][ T9184] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1108.638475][ T9184] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 10 [ 1108.669670][ T9184] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 134, setting to 64 [ 1108.699575][ T9184] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1108.716244][ T9184] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1108.731084][T13772] netlink: 'syz.5.2156': attribute type 3 has an invalid length. [ 1108.735508][ T9184] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 10 [ 1108.769006][ T9184] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 134, setting to 64 [ 1108.802304][ T9184] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1108.818150][ T9184] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1108.837785][ T9184] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 10 [ 1108.858970][ T9184] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 134, setting to 64 [ 1108.889208][ T9184] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1108.900152][ T9184] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1108.919169][ T9184] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 10 [ 1109.068333][ T9184] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 134, setting to 64 [ 1109.109833][ T9184] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1109.128629][ T9184] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1109.139092][ T9184] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1109.147620][ T9184] usb 2-1: Product: syz [ 1109.166278][ T9184] usb 2-1: Manufacturer: syz [ 1109.174663][ T9184] usb 2-1: SerialNumber: syz [ 1109.189087][ T9184] usb 2-1: config 0 descriptor?? [ 1109.224652][T13744] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1109.243386][ T9184] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 1109.474328][ T9184] usb 2-1: USB disconnect, device number 8 [ 1109.502545][ T9184] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 1113.734286][T13840] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1113.752497][T13840] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1113.787995][T13840] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1113.848799][T13840] device bridge_slave_0 left promiscuous mode [ 1113.881743][T13840] bridge0: port 1(bridge_slave_0) entered disabled state [ 1113.941534][T13840] device bridge_slave_1 left promiscuous mode [ 1113.980257][T13840] bridge0: port 2(bridge_slave_1) entered disabled state [ 1114.046911][T13840] bond0: (slave bond_slave_0): Releasing backup interface [ 1114.154208][T13840] bond0: (slave bond_slave_1): Releasing backup interface [ 1114.469561][T13840] team0: Port device team_slave_0 removed [ 1114.528987][T13840] team0: Port device team_slave_1 removed [ 1114.576658][T13840] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1114.587426][T13840] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1114.682211][T13840] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1114.750381][T13840] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1116.525226][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.535460][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.879004][ T4266] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 1116.887943][ T4266] Bluetooth: hci5: Injecting HCI hardware error event [ 1116.897187][ T4266] Bluetooth: hci5: hardware error 0x00 [ 1118.120328][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 1118.120345][ T26] audit: type=1326 audit(1746027526.576:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13895 comm="syz.3.2188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fb018e969 code=0x7ffc0000 [ 1118.799170][T13898] 9pnet_virtio: no channels available for device syz [ 1118.949117][ T4266] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 1119.483239][ T26] audit: type=1326 audit(1746027526.576:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13895 comm="syz.3.2188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fb018e969 code=0x7ffc0000 [ 1119.579911][ T26] audit: type=1326 audit(1746027526.606:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13895 comm="syz.3.2188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=256 compat=0 ip=0x7f0fb018e969 code=0x7ffc0000 [ 1119.718529][ T26] audit: type=1326 audit(1746027526.606:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13895 comm="syz.3.2188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fb018e969 code=0x7ffc0000 [ 1119.884178][ T26] audit: type=1326 audit(1746027526.606:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13895 comm="syz.3.2188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fb018e969 code=0x7ffc0000 [ 1119.989821][ T26] audit: type=1326 audit(1746027526.606:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13895 comm="syz.3.2188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f0fb018e969 code=0x7ffc0000 [ 1120.119410][T13914] binder: Unknown parameter 'seclabel' [ 1120.127563][ T26] audit: type=1326 audit(1746027526.606:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13895 comm="syz.3.2188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fb018e969 code=0x7ffc0000 [ 1120.228462][ T26] audit: type=1326 audit(1746027526.606:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13895 comm="syz.3.2188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fb018e969 code=0x7ffc0000 [ 1120.318430][ T26] audit: type=1326 audit(1746027526.606:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13895 comm="syz.3.2188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f0fb018e969 code=0x7ffc0000 [ 1120.435044][ T26] audit: type=1326 audit(1746027526.736:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13895 comm="syz.3.2188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fb018e969 code=0x7ffc0000 [ 1123.264471][T13950] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2201'. [ 1128.344640][ T4263] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1128.359507][ T4263] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1128.368282][ T4263] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1128.379432][ T4263] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1128.387020][ T4263] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1128.407302][ T4263] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1129.288037][T14004] chnl_net:caif_netlink_parms(): no params data found [ 1129.788210][T14004] bridge0: port 1(bridge_slave_0) entered blocking state [ 1129.815617][T14004] bridge0: port 1(bridge_slave_0) entered disabled state [ 1129.842619][T14004] device bridge_slave_0 entered promiscuous mode [ 1129.881553][T14004] bridge0: port 2(bridge_slave_1) entered blocking state [ 1129.901131][T14004] bridge0: port 2(bridge_slave_1) entered disabled state [ 1129.921938][T14004] device bridge_slave_1 entered promiscuous mode [ 1130.014458][T14004] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1130.097021][T14004] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1130.155276][T14026] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2218'. [ 1130.205721][T14028] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2218'. [ 1130.239308][T14028] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2218'. [ 1130.456744][T14004] team0: Port device team_slave_0 added [ 1130.479585][ T4266] Bluetooth: hci3: command 0x0409 tx timeout [ 1130.501705][T14004] team0: Port device team_slave_1 added [ 1130.550484][T14004] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1130.557489][T14004] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1130.583414][ C0] vkms_vblank_simulate: vblank timer overrun [ 1130.612890][T14004] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1130.643510][T14004] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1130.661132][T14004] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1130.687059][ C0] vkms_vblank_simulate: vblank timer overrun [ 1130.905724][T14004] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1131.208276][T14004] device hsr_slave_0 entered promiscuous mode [ 1131.272824][T14004] device hsr_slave_1 entered promiscuous mode [ 1131.330199][T14004] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1131.337831][T14004] Cannot create hsr debugfs directory [ 1131.991599][ T4375] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1132.026527][T14057] loop4: detected capacity change from 0 to 524255232 [ 1132.181507][ T4375] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1132.549267][ T4266] Bluetooth: hci3: command 0x041b tx timeout [ 1133.670413][ T4375] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1133.875914][ T4375] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1134.624276][T14088] exFAT-fs (nullb0): invalid boot record signature [ 1134.688490][T14088] exFAT-fs (nullb0): failed to read boot sector [ 1134.739172][ T4263] Bluetooth: hci3: command 0x040f tx timeout [ 1135.339043][T14088] exFAT-fs (nullb0): failed to recognize exfat type [ 1136.730631][T14094] device wlan0 entered promiscuous mode [ 1136.789071][ T4266] Bluetooth: hci3: command 0x0419 tx timeout [ 1137.747641][T14004] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1137.914271][T14004] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1138.166865][T14004] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1138.279787][T14004] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1139.072766][T14004] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1139.211109][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1139.239298][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1139.296090][T14004] 8021q: adding VLAN 0 to HW filter on device team0 [ 1139.775429][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1139.806691][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1139.883764][ T4309] bridge0: port 1(bridge_slave_0) entered blocking state [ 1139.890947][ T4309] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1140.013455][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1140.059277][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1140.159309][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1140.202648][ T4309] bridge0: port 2(bridge_slave_1) entered blocking state [ 1140.209891][ T4309] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1140.361536][ T4375] device hsr_slave_0 left promiscuous mode [ 1140.395625][ T4375] device hsr_slave_1 left promiscuous mode [ 1140.442846][ T4375] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1140.629041][ T4375] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1140.669504][ T4375] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1140.676950][ T4375] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1140.824602][ T4375] device bridge_slave_1 left promiscuous mode [ 1140.866208][ T4375] bridge0: port 2(bridge_slave_1) entered disabled state [ 1141.010325][ T4375] device bridge_slave_0 left promiscuous mode [ 1141.016558][ T4375] bridge0: port 1(bridge_slave_0) entered disabled state [ 1141.172201][T14031] Set syz1 is full, maxelem 65536 reached [ 1141.294508][ T4375] device veth1_macvtap left promiscuous mode [ 1141.302111][ T4375] device veth0_macvtap left promiscuous mode [ 1141.317916][ T4375] device veth1_vlan left promiscuous mode [ 1141.361268][ T4375] device veth0_vlan left promiscuous mode [ 1141.918841][T14167] 9pnet_virtio: no channels available for device syz [ 1143.180810][T14188] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2251'. [ 1144.058345][ T4375] team0 (unregistering): Port device team_slave_1 removed [ 1144.252868][ T4375] team0 (unregistering): Port device team_slave_0 removed [ 1144.491405][ T4375] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1144.668545][ T4375] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1144.752980][T14193] syz.2.2253 (14193): drop_caches: 2 [ 1145.634454][T14206] kernel profiling enabled (shift: 17) [ 1147.115954][ T4375] bond0 (unregistering): Released all slaves [ 1147.357411][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1147.376751][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1147.388482][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1147.407762][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1147.505493][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1147.560012][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1147.572461][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1147.611366][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1147.631868][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1147.854041][T14004] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1147.877102][T14004] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1147.906408][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1147.940726][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1149.338251][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1149.348013][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1149.416569][T14004] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1149.932618][T14263] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2267'. [ 1150.198411][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1150.235702][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1150.381121][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1150.435218][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1150.507233][T14004] device veth0_vlan entered promiscuous mode [ 1150.580154][T14004] device veth1_vlan entered promiscuous mode [ 1150.767065][T14004] device veth0_macvtap entered promiscuous mode [ 1150.846452][T14004] device veth1_macvtap entered promiscuous mode [ 1150.875702][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1150.904598][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1150.942887][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1150.973680][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1150.983884][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1150.993478][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1151.003000][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1151.022496][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1151.057420][T14004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1151.132930][T14004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1151.186033][T14004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1151.216213][T14004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1151.266601][T14004] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1151.299120][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1151.317268][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1151.348967][T14004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1151.369553][T14004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1151.386846][T14004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1151.398785][T14004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1151.413625][T14004] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1151.423702][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1151.439587][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1151.455532][T14004] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1151.465275][T14004] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1151.476245][T14004] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1151.485725][T14004] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1151.681933][ T4380] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1151.706057][ T4380] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1151.772744][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1151.793862][ T4375] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1151.845129][ T4375] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1151.911004][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1152.272760][T14301] Bluetooth: (null): Invalid header checksum [ 1152.361285][ T4376] Bluetooth: (null): Invalid header checksum [ 1152.377320][ T4376] Bluetooth: (null): Invalid header checksum [ 1152.471970][ T4376] Bluetooth: (null): Invalid header checksum [ 1152.580954][ T4376] Bluetooth: (null): Invalid header checksum [ 1152.689208][ T4379] Bluetooth: (null): Invalid header checksum [ 1152.836658][ T4377] Bluetooth: (null): Invalid header checksum [ 1153.549027][T14328] loop4: detected capacity change from 0 to 524255232 [ 1153.671760][ T4266] Bluetooth: hci2: unknown advertising packet type: 0x6c [ 1155.780379][T14360] netlink: 5 bytes leftover after parsing attributes in process `syz.5.2282'. [ 1155.886040][T14366] MPI: mpi too large (124808 bits) [ 1156.285765][T14338] device syzkaller0 entered promiscuous mode [ 1157.024171][T14387] sch_tbf: burst 32852 is lower than device lo mtu (65550) ! [ 1157.412322][ T8622] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1157.611793][ T8622] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1157.637844][ T8622] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1157.666391][ T8622] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1157.688786][ T8622] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1157.721143][T14386] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1158.876223][ T4263] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1158.887792][ T4263] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1158.904017][ T4263] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1158.932556][ T4263] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1158.940665][ T4263] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1158.949813][ T4263] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1160.182438][ T4240] usb 4-1: USB disconnect, device number 10 [ 1161.037871][ T4263] Bluetooth: hci1: command 0x0409 tx timeout [ 1163.085093][T14429] device team0 entered promiscuous mode [ 1163.091357][T14429] device team_slave_0 entered promiscuous mode [ 1163.108115][T14429] device team_slave_1 entered promiscuous mode [ 1163.115197][ T4263] Bluetooth: hci1: command 0x041b tx timeout [ 1163.228338][T14429] team0: Port device team_slave_0 removed [ 1163.253412][T14398] chnl_net:caif_netlink_parms(): no params data found [ 1163.304995][T14427] device team0 left promiscuous mode [ 1163.314500][T14427] device team_slave_1 left promiscuous mode [ 1164.550909][T14398] bridge0: port 1(bridge_slave_0) entered blocking state [ 1164.558156][T14398] bridge0: port 1(bridge_slave_0) entered disabled state [ 1164.617155][T14398] device bridge_slave_0 entered promiscuous mode [ 1164.774410][T14398] bridge0: port 2(bridge_slave_1) entered blocking state [ 1164.809038][T14398] bridge0: port 2(bridge_slave_1) entered disabled state [ 1164.820474][T14398] device bridge_slave_1 entered promiscuous mode [ 1165.026611][T14398] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1165.134013][T14398] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1165.189387][ T4266] Bluetooth: hci1: command 0x040f tx timeout [ 1165.298379][T14398] team0: Port device team_slave_0 added [ 1165.402422][T14398] team0: Port device team_slave_1 added [ 1165.513411][T14398] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1165.609432][T14398] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1165.673077][T14398] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1167.008075][T14398] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1167.036067][T14398] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1167.161896][ T9184] libceph: connect (1)[c::]:6789 error -101 [ 1167.179117][ T9184] libceph: mon0 (1)[c::]:6789 connect error [ 1167.252240][T14398] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1167.289111][ T4266] Bluetooth: hci1: command 0x0419 tx timeout [ 1167.451953][ T9184] libceph: connect (1)[c::]:6789 error -101 [ 1167.460856][ T9184] libceph: mon0 (1)[c::]:6789 connect error [ 1167.605623][T14398] device hsr_slave_0 entered promiscuous mode [ 1167.652813][T14398] device hsr_slave_1 entered promiscuous mode [ 1167.844213][T14517] ceph: No mds server is up or the cluster is laggy [ 1168.161186][ T8775] libceph: connect (1)[c::]:6789 error -101 [ 1168.172600][ T8775] libceph: mon0 (1)[c::]:6789 connect error [ 1169.515883][T14553] netlink: 'syz.5.2328': attribute type 10 has an invalid length. [ 1169.540843][T14553] device syz_tun entered promiscuous mode [ 1169.611198][T14553] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1172.457457][T14398] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1172.518632][T14398] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1172.580737][T14597] binder: 14596:14597 unknown command 1074553619 [ 1172.587192][T14597] binder: 14596:14597 ioctl c0306201 200000000100 returned -22 [ 1172.653467][T14398] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1172.686790][T14398] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1173.057946][T14398] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1173.133506][T14613] 9pnet_virtio: no channels available for device syz [ 1173.216433][T10494] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1173.287078][T10494] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1174.250615][T14398] 8021q: adding VLAN 0 to HW filter on device team0 [ 1174.308027][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1174.351467][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1174.399650][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 1174.406856][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1174.487091][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1174.522557][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1174.569786][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1174.589099][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 1174.596314][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1174.655902][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1174.767030][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1174.811297][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1174.851535][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1174.874580][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1174.909967][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1174.919248][T14646] program syz.2.2356 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1174.930025][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1174.960641][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1174.974844][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1175.001702][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1175.036630][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1175.057077][T14398] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1175.479962][T14659] device syzkaller0 entered promiscuous mode [ 1176.584664][T14678] binder: 14677:14678 unknown command 0 [ 1176.634004][T14678] binder: 14677:14678 ioctl c0306201 200000000100 returned -22 [ 1177.355914][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.362904][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.409338][ T9184] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 1178.806858][ T9184] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1178.818374][T14705] overlayfs: missing 'lowerdir' [ 1178.865243][ T9184] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1178.939480][ T9184] usb 6-1: config 0 descriptor?? [ 1182.716682][T14398] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1182.802632][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1182.824513][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1182.857189][ T9184] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 1182.900010][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1182.923435][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1182.928989][ T9184] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 1182.988982][ T9184] [drm:udl_init] *ERROR* Selecting channel failed [ 1183.013208][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1183.039800][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1183.054297][ T9184] [drm] Initialized udl 0.0.1 20120220 for 6-1:0.0 on minor 2 [ 1183.081239][T14398] device veth0_vlan entered promiscuous mode [ 1183.098701][ T9184] [drm] Initialized udl on minor 2 [ 1183.302037][ T9184] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1183.334911][ T9184] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 1183.388147][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1183.398095][ T9184] usb 6-1: USB disconnect, device number 39 [ 1183.475299][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1183.808475][T14398] device veth1_vlan entered promiscuous mode [ 1183.923785][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1183.941247][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1183.982310][T14398] device veth0_macvtap entered promiscuous mode [ 1184.018797][T14398] device veth1_macvtap entered promiscuous mode [ 1184.166616][T14738] device syzkaller0 entered promiscuous mode [ 1184.235873][T14398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1184.280704][T14398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1184.368305][T14398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1184.392786][T14398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1184.428930][T14398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1184.468975][T14398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1184.493808][T14398] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1184.873939][T14770] hub 2-0:1.0: USB hub found [ 1184.879951][T14770] hub 2-0:1.0: 1 port detected [ 1188.364573][T14804] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2394'. [ 1188.560748][ T952] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1188.755347][ T952] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1188.780304][ T952] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1188.823005][ T952] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1188.835287][ T952] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1188.874079][ T952] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1188.892943][ T952] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1188.905187][ T952] usb 4-1: Product: syz [ 1188.913063][ T952] usb 4-1: Manufacturer: syz [ 1188.943176][ T952] cdc_wdm 4-1:1.0: skipping garbage [ 1188.948447][ T952] cdc_wdm 4-1:1.0: skipping garbage [ 1188.961504][ T952] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 1188.967625][ T952] cdc_wdm 4-1:1.0: Unknown control protocol [ 1189.149311][ T952] usb 4-1: USB disconnect, device number 11 [ 1190.795276][T14812] gfs2: not a GFS2 filesystem [ 1192.276087][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1192.293042][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1192.327946][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1192.401426][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1192.500431][T14398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1192.547575][T14398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1192.654550][T14398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1192.704546][T14398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1192.725316][T14398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1192.790539][T14398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1192.865353][T14398] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1192.910718][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1192.936908][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1193.226078][ T4392] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1193.331115][T14398] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1193.369123][T14398] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1193.398392][T14398] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1193.416478][T14398] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1193.632743][ T4392] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1193.851281][ T4392] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1194.186506][ T4392] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1194.286132][T10494] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1194.339148][T10494] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1194.442038][ T4309] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1194.459460][T11243] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1194.519219][ T4309] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1194.641502][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1197.549108][T14932] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1199.277547][T14963] binder: 14962:14963 ioctl c0306201 200000000100 returned -14 [ 1199.762876][ T4392] device hsr_slave_0 left promiscuous mode [ 1199.826296][ T4392] device hsr_slave_1 left promiscuous mode [ 1199.834213][ T4392] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1199.849486][ T4392] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1199.857885][ T4392] device bridge_slave_1 left promiscuous mode [ 1199.913014][ T4392] bridge0: port 2(bridge_slave_1) entered disabled state [ 1199.937520][ T4392] device bridge_slave_0 left promiscuous mode [ 1199.949235][ T4392] bridge0: port 1(bridge_slave_0) entered disabled state [ 1200.088869][ T4392] device veth1_macvtap left promiscuous mode [ 1200.146089][ T4392] device veth0_macvtap left promiscuous mode [ 1200.179240][ T4392] device veth1_vlan left promiscuous mode [ 1200.185187][ T4392] device veth0_vlan left promiscuous mode [ 1200.659191][ T952] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 1200.889060][ T952] usb 3-1: Using ep0 maxpacket: 32 [ 1200.900469][ T952] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 1200.988577][ T952] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1201.055313][ T952] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1201.095004][ T952] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1201.118324][ T952] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1201.165971][ T952] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1201.195539][ T952] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1201.207477][ T952] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1201.233625][ T952] usb 3-1: config 0 descriptor?? [ 1201.279883][T14989] Falling back ldisc for ttyprintk. [ 1201.471942][ T952] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1201.540205][T15007] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2448'. [ 1202.822997][ T4392] team0 (unregistering): Port device team_slave_1 removed [ 1203.018425][ T4392] team0 (unregistering): Port device team_slave_0 removed [ 1203.180864][ T4392] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1203.298752][T11963] usb 3-1: USB disconnect, device number 5 [ 1203.346545][T11963] usblp0: removed [ 1203.406732][ T4392] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1204.914075][ T4392] bond0 (unregistering): Released all slaves [ 1205.203146][T15029] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1205.241669][T15029] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1205.248577][T15055] random: crng reseeded on system resumption [ 1205.276364][T15029] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1205.331324][T15029] device bridge_slave_0 left promiscuous mode [ 1205.337657][T15029] bridge0: port 1(bridge_slave_0) entered disabled state [ 1205.392459][T15029] device bridge_slave_1 left promiscuous mode [ 1205.413266][T15029] bridge0: port 2(bridge_slave_1) entered disabled state [ 1205.458085][T15029] bond0: (slave bond_slave_0): Releasing backup interface [ 1205.543341][T15029] bond0: (slave bond_slave_1): Releasing backup interface [ 1205.830663][T15029] team0: Port device team_slave_0 removed [ 1206.043794][T15029] team0: Port device team_slave_1 removed [ 1206.080131][T15029] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1206.143128][T15029] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1206.211297][T15029] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1206.238725][T15029] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1206.507161][T15030] netlink: 'syz.0.2459': attribute type 10 has an invalid length. [ 1206.723341][T15030] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1206.897132][T15030] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1206.938463][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1207.020172][ T93] block nbd6: Attempted send on invalid socket [ 1207.026977][ T93] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 1207.075512][T15076] XFS (nbd6): SB validate failed with error -5. [ 1208.122338][T15111] IPv6: Can't replace route, no match found [ 1208.446855][T15120] netlink: 140 bytes leftover after parsing attributes in process `syz.0.2478'. [ 1212.275853][T15163] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2489'. [ 1213.319120][ T952] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1213.339005][ T9184] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 1213.570831][ T952] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1213.600147][ T952] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1213.641192][ T9184] usb 7-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1213.641625][ T952] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1213.651895][ T9184] usb 7-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x94, skipping [ 1213.651924][ T9184] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1213.714901][ T9184] usb 7-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 1213.726377][ T9184] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1213.739128][ T9184] usb 7-1: Product: syz [ 1213.743565][ T9184] usb 7-1: Manufacturer: syz [ 1213.748508][ T9184] usb 7-1: SerialNumber: syz [ 1213.768604][ T9184] usb 7-1: config 0 descriptor?? [ 1214.006482][ T952] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1214.061974][ T4330] usb 7-1: USB disconnect, device number 10 [ 1214.109258][ T952] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1214.167240][ T952] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1214.207571][ T952] usb 4-1: Product: syz [ 1214.227091][ T952] usb 4-1: Manufacturer: syz [ 1214.388649][ T952] cdc_wdm 4-1:1.0: skipping garbage [ 1214.435088][ T952] cdc_wdm 4-1:1.0: skipping garbage [ 1214.468623][ T952] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 1214.501499][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1214.508348][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1214.514624][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1214.521222][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1214.528026][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1214.534636][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1214.566746][ T952] cdc_wdm 4-1:1.0: Unknown control protocol [ 1214.622428][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1214.629094][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1214.637733][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1214.644397][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1214.669413][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1214.676097][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1214.683842][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1214.690517][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1214.736569][ T952] usb 4-1: USB disconnect, device number 12 [ 1214.770917][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1214.777605][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1214.783704][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1216.211993][T15219] device syzkaller0 entered promiscuous mode [ 1217.225163][ T26] kauditd_printk_skb: 5 callbacks suppressed [ 1217.225178][ T26] audit: type=1326 audit(1746027625.676:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15246 comm="syz.2.2514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd30758e969 code=0x7ffc0000 [ 1217.372558][ T26] audit: type=1326 audit(1746027625.726:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15246 comm="syz.2.2514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd30758e969 code=0x7ffc0000 [ 1217.472241][ T26] audit: type=1326 audit(1746027625.726:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15246 comm="syz.2.2514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd30758e969 code=0x7ffc0000 [ 1217.575560][ T26] audit: type=1326 audit(1746027625.726:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15246 comm="syz.2.2514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd30758e969 code=0x7ffc0000 [ 1217.646591][ T26] audit: type=1326 audit(1746027625.726:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15246 comm="syz.2.2514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd30758e969 code=0x7ffc0000 [ 1217.669229][ C1] vkms_vblank_simulate: vblank timer overrun [ 1217.762839][ T26] audit: type=1326 audit(1746027625.726:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15246 comm="syz.2.2514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd30758e969 code=0x7ffc0000 [ 1217.824908][ T26] audit: type=1326 audit(1746027625.726:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15246 comm="syz.2.2514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd30758e969 code=0x7ffc0000 [ 1217.857672][ T26] audit: type=1326 audit(1746027625.726:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15246 comm="syz.2.2514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd30758e969 code=0x7ffc0000 [ 1217.888112][ T26] audit: type=1326 audit(1746027625.726:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15246 comm="syz.2.2514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd30758e969 code=0x7ffc0000 [ 1217.923708][ T26] audit: type=1326 audit(1746027625.726:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15246 comm="syz.2.2514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd30758e969 code=0x7ffc0000 [ 1218.324908][T15271] tmpfs: Unknown parameter 'Dȅ3GK-Wƹ 7quF ' [ 1222.390928][ T4266] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 1222.414122][ T4266] Bluetooth: hci2: Injecting HCI hardware error event [ 1222.423569][ T4263] Bluetooth: hci2: hardware error 0x00 [ 1223.794535][T15260] netlink: 184 bytes leftover after parsing attributes in process `syz.2.2518'. [ 1223.813359][T15287] netlink: 'syz.3.2527': attribute type 10 has an invalid length. [ 1223.833553][T15287] device syz_tun entered promiscuous mode [ 1223.900805][T15287] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1224.548962][ T4263] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 1224.954088][ T4263] Bluetooth: hci1: link tx timeout [ 1225.005716][ T4263] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 1225.589318][ T4263] Bluetooth: hci1: link tx timeout [ 1225.594575][ T4263] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 1225.618508][T15319] device wg2 entered promiscuous mode [ 1225.939477][ T26] kauditd_printk_skb: 14 callbacks suppressed [ 1225.939502][ T26] audit: type=1800 audit(1746027634.386:425): pid=15333 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2541" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 1227.098996][ T4263] Bluetooth: hci1: command 0x0406 tx timeout [ 1228.895675][T15397] binder: 15395:15397 ioctl 4018620d 0 returned -22 [ 1231.127190][T15418] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2562'. [ 1231.150077][ T4266] Bluetooth: hci1: command 0x0405 tx timeout [ 1232.805373][T15437] hub 2-0:1.0: USB hub found [ 1232.830327][T15437] hub 2-0:1.0: 1 port detected [ 1235.322493][T15494] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2584'. [ 1235.346020][T15496] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2583'. [ 1235.380543][T15496] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2583'. [ 1235.430339][T15496] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2583'. [ 1237.281350][T15510] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1237.293790][T15510] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1237.323313][T15510] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 1237.345598][T15510] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1237.363353][T15510] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1237.382906][T15510] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 1237.586497][T15510] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1237.597524][T15510] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1237.605593][T15510] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 1237.880880][T15516] block device autoloading is deprecated and will be removed. [ 1237.979056][ T4240] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1238.180813][ T4240] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1238.202013][ T4240] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1238.290047][ T4240] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1238.397679][ T4240] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1238.469068][ T4266] Bluetooth: hci0: command 0x0c1a tx timeout [ 1238.577852][ T4240] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1238.631974][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.641253][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.725459][ T4240] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1238.765249][ T4240] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1238.872162][ T4240] usb 3-1: Product: syz [ 1238.885640][ T4240] usb 3-1: Manufacturer: syz [ 1238.908963][ T4240] cdc_wdm 3-1:1.0: skipping garbage [ 1238.923829][ T4240] cdc_wdm 3-1:1.0: skipping garbage [ 1238.949525][ T4240] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 1238.964650][ T4240] cdc_wdm 3-1:1.0: Unknown control protocol [ 1239.349199][ T4266] Bluetooth: hci3: command 0x0c1a tx timeout [ 1239.594652][ T4266] Bluetooth: hci1: command 0x0c1a tx timeout [ 1239.792352][ T4332] usb 3-1: USB disconnect, device number 6 [ 1239.917737][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88805418d000: rx timeout, send abort [ 1239.929378][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88805418d000: 0x0f001: (3) A timeout occurred and this is the connection abort to close the session. [ 1240.549155][ T4266] Bluetooth: hci0: command 0x0406 tx timeout [ 1241.428967][ T4266] Bluetooth: hci3: command 0x0406 tx timeout [ 1241.487489][ T26] audit: type=1326 audit(1746027649.936:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15633 comm="syz.0.2624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb1e58e969 code=0x7ffc0000 [ 1241.637934][ T26] audit: type=1326 audit(1746027649.936:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15633 comm="syz.0.2624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb1e58e969 code=0x7ffc0000 [ 1241.660424][ C0] vkms_vblank_simulate: vblank timer overrun [ 1241.669089][ T4266] Bluetooth: hci1: command 0x0406 tx timeout [ 1241.826938][ T26] audit: type=1326 audit(1746027650.026:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15633 comm="syz.0.2624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=251 compat=0 ip=0x7ffb1e58e969 code=0x7ffc0000 [ 1241.967967][ T26] audit: type=1326 audit(1746027650.026:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15633 comm="syz.0.2624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb1e58e969 code=0x7ffc0000 [ 1241.990437][ C0] vkms_vblank_simulate: vblank timer overrun [ 1242.031890][ T26] audit: type=1326 audit(1746027650.026:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15633 comm="syz.0.2624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb1e58e969 code=0x7ffc0000 [ 1242.965964][T15677] ucma_write: process 519 (syz.2.2637) changed security contexts after opening file descriptor, this is not allowed. [ 1243.373303][T15700] netlink: 'syz.2.2644': attribute type 1 has an invalid length. [ 1243.422193][T15700] device bond1 entered promiscuous mode [ 1243.430119][T15700] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1243.520438][T15706] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1243.527545][T15706] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 1243.586685][T15706] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 1243.623572][T15706] bond1: (slave wireguard0): making interface the new active one [ 1243.644968][T15706] device wireguard0 entered promiscuous mode [ 1243.663842][T15706] bond1: (slave wireguard0): Enslaving as an active interface with an up link [ 1243.699375][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 1244.698460][T15735] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1244.705854][T15735] IPv6: NLM_F_CREATE should be set when creating new route [ 1246.045677][T15735] device syz_tun left promiscuous mode [ 1246.624065][T15774] input: syz1 as /devices/virtual/input/input12 [ 1248.267691][T15735] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1248.320920][T15735] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1249.668918][ T4266] Bluetooth: hci3: command 0x0406 tx timeout [ 1250.074134][T15735] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1250.091809][T15735] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1250.119029][T15735] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1250.128005][T15735] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1250.933233][T15830] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2677'. [ 1251.217534][T15842] netlink: 'syz.3.2681': attribute type 1 has an invalid length. [ 1251.279132][T15842] netlink: 'syz.3.2681': attribute type 4 has an invalid length. [ 1251.305526][T15842] netlink: 15363 bytes leftover after parsing attributes in process `syz.3.2681'. [ 1251.664368][T15859] tipc: Failed to obtain node identity [ 1251.688643][T15859] tipc: Enabling of bearer rejected, failed to enable media [ 1251.749163][ T4266] Bluetooth: hci3: command 0x0406 tx timeout [ 1251.985289][T15873] binder: 15871:15873 ioctl 400c620e 200000000000 returned -22 [ 1252.022414][ T26] audit: type=1326 audit(1746027660.476:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15875 comm="syz.2.2691" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd30758e969 code=0x0 [ 1252.124429][T15878] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2693'. [ 1252.166554][T15879] futex_wake_op: syz.2.2691 tries to shift op by -33; fix this program [ 1252.438524][T15882] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 1253.892785][T15931] device syzkaller1 entered promiscuous mode [ 1255.619136][T15955] tmpfs: Unknown parameter 'grpquota' [ 1257.047566][T15963] overlayfs: missing 'lowerdir' [ 1260.848713][ T4266] Bluetooth: hci1: Malformed Event: 0x02 [ 1262.268939][ T952] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1263.658905][ T952] usb 4-1: Using ep0 maxpacket: 8 [ 1263.730190][ T952] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 1263.788942][ T952] usb 4-1: config 0 has no interface number 0 [ 1263.817976][ T952] usb 4-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 1263.936895][ T952] usb 4-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 1263.994342][ T952] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1264.046491][ T952] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1264.056175][ T952] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1264.066549][ T952] usb 4-1: config 0 descriptor?? [ 1264.074898][ T952] ldusb 4-1:0.55: Interrupt in endpoint not found [ 1264.303784][ T952] usb 4-1: USB disconnect, device number 13 [ 1264.383323][T11980] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 1264.660742][T11980] usb 3-1: config 1 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1264.687760][T11980] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1264.718605][T11980] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1264.746746][T11980] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1264.810585][T11980] usb 3-1: Product: syz [ 1264.821111][T11980] usb 3-1: Manufacturer: syz [ 1264.832709][T11980] usb 3-1: SerialNumber: syz [ 1266.021932][T11980] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 1266.039152][T11980] usb 3-1: USB disconnect, device number 7 [ 1266.048435][T11980] usblp0: removed [ 1266.134080][T16083] can0: slcan on ptm0. [ 1266.520035][T16074] can0 (unregistered): slcan off ptm0. [ 1271.508722][T16161] 9pnet_virtio: no channels available for device syz [ 1272.688408][T16185] 9pnet_virtio: no channels available for device syz [ 1273.154457][T16200] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2775'. [ 1273.228672][T16200] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2775'. [ 1273.717015][T16224] binder: 16222:16224 ioctl c018620c 2000000000c0 returned -1 [ 1274.010095][T16231] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1274.331375][T16231] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1278.318314][T16308] 9pnet_virtio: no channels available for device syz [ 1278.532875][T16315] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2807'. [ 1278.582962][T16315] device bridge_slave_1 left promiscuous mode [ 1278.594284][T16315] bridge0: port 2(bridge_slave_1) entered disabled state [ 1278.723628][T16315] device bridge_slave_0 left promiscuous mode [ 1278.763768][T16315] bridge0: port 1(bridge_slave_0) entered disabled state [ 1279.005044][ T4266] Bluetooth: hci1: unexpected event for opcode 0x0c7b [ 1280.892847][T16362] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2821'. [ 1280.963602][T16362] serio: Serial port pts0 [ 1283.318927][ T952] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1283.518965][ T952] usb 4-1: Using ep0 maxpacket: 8 [ 1283.525973][ T952] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 1283.558904][ T952] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1283.588642][ T952] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1283.626364][ T952] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1283.646831][ T952] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1283.677123][ T952] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1283.696400][ T952] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1283.894748][ T26] audit: type=1326 audit(1746027692.346:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16434 comm="syz.5.2840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f65b8e969 code=0x7ffc0000 [ 1283.929119][ T952] usb 4-1: usb_control_msg returned -32 [ 1283.934769][ T952] usbtmc 4-1:16.0: can't read capabilities [ 1284.079046][ T26] audit: type=1326 audit(1746027692.396:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16434 comm="syz.5.2840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f65b8e969 code=0x7ffc0000 [ 1284.193153][ T26] audit: type=1326 audit(1746027692.396:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16434 comm="syz.5.2840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8f65b8e969 code=0x7ffc0000 [ 1284.293618][ T26] audit: type=1326 audit(1746027692.626:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16434 comm="syz.5.2840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f65b8e969 code=0x7ffc0000 [ 1284.396320][ T26] audit: type=1326 audit(1746027692.626:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16434 comm="syz.5.2840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f65b8e969 code=0x7ffc0000 [ 1284.549015][ T4263] Bluetooth: hci4: command 0x1003 tx timeout [ 1284.555915][ T4266] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1284.657230][T16455] usbtmc 4-1:16.0: usb_clear_halt returned -32 [ 1284.861237][ T952] usb 4-1: USB disconnect, device number 14 [ 1285.502824][T16471] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2847'. [ 1285.736994][T16472] input: syz0 as /devices/virtual/input/input13 [ 1286.317597][T16485] device syzkaller0 entered promiscuous mode [ 1292.162294][ T26] audit: type=1326 audit(1746027700.616:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16539 comm="syz.3.2867" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0fb018e969 code=0x0 [ 1292.279090][T11980] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 1292.308218][T16547] futex_wake_op: syz.3.2867 tries to shift op by -33; fix this program [ 1292.499045][T11980] usb 6-1: Using ep0 maxpacket: 32 [ 1292.506006][T11980] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 1292.557553][T11980] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1292.625738][T11980] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1292.681851][T11980] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1292.762117][T11980] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1292.806867][T11980] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1292.893857][T11980] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1292.985143][T11980] usb 6-1: Product: syz [ 1292.995838][T11980] usb 6-1: Manufacturer: syz [ 1293.035840][T11980] usb 6-1: SerialNumber: syz [ 1293.054223][T11980] usb 6-1: config 0 descriptor?? [ 1293.084291][T11980] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1293.109735][T11980] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1293.276748][T16569] autofs4:pid:16569:autofs_fill_super: could not open pipe file descriptor [ 1293.883297][T16589] netlink: 'syz.6.2881': attribute type 27 has an invalid length. [ 1294.563137][T16614] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2886'. [ 1294.579066][T16614] usb 6-1: USB disconnect, device number 40 [ 1294.668958][ T9604] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1294.862743][ T9604] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1294.951704][ T9604] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1295.096898][ T9604] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1295.321810][ T9604] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1295.334656][T16614] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 1295.466787][T16620] hub 6-0:1.0: USB hub found [ 1295.481109][T16620] hub 6-0:1.0: 1 port detected [ 1295.760744][T16608] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1295.849000][ T952] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 1299.962412][ T4296] usb 7-1: USB disconnect, device number 11 [ 1300.072312][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.079294][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1301.628138][T16704] input: syz1 as /devices/virtual/input/input14 [ 1301.770547][T16708] hub 6-0:1.0: USB hub found [ 1301.778994][T16708] hub 6-0:1.0: 1 port detected [ 1302.447036][T16709] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2907'. [ 1303.229521][T16719] 9pnet_virtio: no channels available for device syz [ 1303.697158][ T4264] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1303.708235][ T4266] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1303.717804][ T4264] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1303.729238][ T4266] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1303.737098][ T4264] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1303.746161][ T4266] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1304.416519][T15974] bond0: (slave syz_tun): Releasing backup interface [ 1304.856747][ T4529] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1305.087923][ T4529] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1305.447568][ T4529] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1305.824153][ T4529] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1305.834987][T16454] Bluetooth: hci2: command 0x0409 tx timeout [ 1306.837948][T16721] chnl_net:caif_netlink_parms(): no params data found [ 1307.822837][T16721] bridge0: port 1(bridge_slave_0) entered blocking state [ 1307.833732][T16721] bridge0: port 1(bridge_slave_0) entered disabled state [ 1307.863396][T16721] device bridge_slave_0 entered promiscuous mode [ 1307.909246][T16454] Bluetooth: hci2: command 0x041b tx timeout [ 1308.009180][T16721] bridge0: port 2(bridge_slave_1) entered blocking state [ 1308.023192][T16721] bridge0: port 2(bridge_slave_1) entered disabled state [ 1308.048253][T16721] device bridge_slave_1 entered promiscuous mode [ 1308.487410][T16721] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1308.542745][T16721] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1308.832080][T16721] team0: Port device team_slave_0 added [ 1309.000087][T16721] team0: Port device team_slave_1 added [ 1309.387982][T16721] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1309.413859][T16721] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1309.534204][T16721] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1309.674139][T16721] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1309.700152][T16721] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1309.858381][T16721] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1309.989180][T16454] Bluetooth: hci2: command 0x040f tx timeout [ 1311.042526][T16721] device hsr_slave_0 entered promiscuous mode [ 1311.189179][T16721] device hsr_slave_1 entered promiscuous mode [ 1311.209290][T16721] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1311.225887][T16721] Cannot create hsr debugfs directory [ 1311.404934][ T4529] device hsr_slave_0 left promiscuous mode [ 1311.501067][ T4529] device hsr_slave_1 left promiscuous mode [ 1311.554279][ T4529] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1311.611262][ T4529] device bridge_slave_1 left promiscuous mode [ 1311.618096][ T4529] bridge0: port 2(bridge_slave_1) entered disabled state [ 1311.662881][ T4529] device bridge_slave_0 left promiscuous mode [ 1311.675783][ T4529] bridge0: port 1(bridge_slave_0) entered disabled state [ 1311.716040][ T4529] device veth1_macvtap left promiscuous mode [ 1311.722465][ T4529] device veth0_macvtap left promiscuous mode [ 1311.728829][ T4529] device veth1_vlan left promiscuous mode [ 1311.735639][ T4529] device veth0_vlan left promiscuous mode [ 1312.068924][T16454] Bluetooth: hci2: command 0x0419 tx timeout [ 1315.507506][T16882] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2946'. [ 1316.130688][ T4529] team0 (unregistering): Port device team_slave_1 removed [ 1316.315626][ T4529] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1316.386709][T16891] hub 2-0:1.0: USB hub found [ 1316.394452][T16891] hub 2-0:1.0: 1 port detected [ 1316.480972][ T4529] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1317.604756][ T4529] bond0 (unregistering): Released all slaves [ 1320.864688][T16721] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1320.941724][T16721] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1321.009394][T16721] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1321.048096][T16721] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1321.643131][T16721] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1321.696282][T10494] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1321.737492][T10494] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1321.816641][T16721] 8021q: adding VLAN 0 to HW filter on device team0 [ 1321.871864][T10494] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1321.915349][T10494] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1321.996421][T10494] bridge0: port 1(bridge_slave_0) entered blocking state [ 1322.003719][T10494] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1322.079259][T10494] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1322.157947][T10494] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1322.202260][T10494] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1322.222831][T10494] bridge0: port 2(bridge_slave_1) entered blocking state [ 1322.230220][T10494] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1322.257051][T10494] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1322.309388][T10494] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1322.366133][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1322.418488][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1322.451288][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1322.461627][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1322.485937][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1322.500613][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1322.535863][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1322.586722][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1322.615093][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1322.651927][T16721] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1323.023760][T16973] device sit0 entered promiscuous mode [ 1323.029802][T16973] netlink: 'syz.3.2965': attribute type 1 has an invalid length. [ 1323.038445][T16973] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2965'. [ 1323.059630][T16973] ubi31: attaching mtd0 [ 1323.066274][T16973] ubi31: scanning is finished [ 1323.074100][T16973] ubi31: empty MTD device detected [ 1323.337386][T16973] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1323.376686][T16973] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1323.399089][T16973] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1323.420960][T16973] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 1323.451394][T16973] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1323.458654][T16973] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1323.467727][T16973] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1685434815 [ 1323.510336][T16973] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1323.531032][T16981] ubi31: background thread "ubi_bgt31d" started, PID 16981 [ 1323.624282][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1323.640653][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1323.684373][T16721] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1324.830993][T10494] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1325.019669][T10494] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1325.038506][T17025] binder: BINDER_SET_CONTEXT_MGR bad uid 3327 != 0 [ 1325.045519][T17025] binder: 17015:17025 ioctl 4018620d 200000000080 returned -1 [ 1325.134371][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1325.168456][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1325.369379][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1325.400203][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1325.409553][T16721] device veth0_vlan entered promiscuous mode [ 1325.435277][T16721] device veth1_vlan entered promiscuous mode [ 1325.468959][ T93] block nbd2: Attempted send on invalid socket [ 1325.475325][ T93] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 1325.485909][T17032] XFS (nbd2): SB validate failed with error -5. [ 1325.607432][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1325.620086][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1325.628579][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1325.657509][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1325.708191][T16454] Bluetooth: hci0: unexpected event for opcode 0x202d [ 1325.718191][T16721] device veth0_macvtap entered promiscuous mode [ 1325.746842][T16721] device veth1_macvtap entered promiscuous mode [ 1325.852808][T16721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1325.906065][T16721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1325.967240][T16721] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1325.994772][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1326.023353][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1326.064895][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1326.103284][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1326.125464][T16721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1326.161263][T16721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1326.206237][T16721] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1326.229740][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1326.253025][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1326.281119][T16721] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1326.296840][T16721] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1326.316086][T16721] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1326.334496][T16721] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1326.533051][ T4376] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1326.556480][ T4376] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1326.617025][ T26] audit: type=1326 audit(1746027735.066:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17046 comm="syz.6.2982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f933ff8e969 code=0x7fc00000 [ 1326.634514][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1327.273124][ T26] audit: type=1326 audit(1746027735.066:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17046 comm="syz.6.2982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f933ff8e969 code=0x7fc00000 [ 1327.401841][ T26] audit: type=1326 audit(1746027735.066:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17046 comm="syz.6.2982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f933ff8e969 code=0x7fc00000 [ 1327.432681][ T26] audit: type=1326 audit(1746027735.066:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17046 comm="syz.6.2982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f933ff8e969 code=0x7fc00000 [ 1327.452523][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1327.484341][ T26] audit: type=1326 audit(1746027735.066:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17046 comm="syz.6.2982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f933ff8e969 code=0x7fc00000 [ 1327.520184][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1327.563389][ T26] audit: type=1326 audit(1746027735.066:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17046 comm="syz.6.2982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f933ff8e969 code=0x7fc00000 [ 1327.578505][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1327.660904][ T26] audit: type=1326 audit(1746027735.066:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17046 comm="syz.6.2982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f933ff8e969 code=0x7fc00000 [ 1327.683299][ C1] vkms_vblank_simulate: vblank timer overrun [ 1327.770019][T17074] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2986'. [ 1327.808856][ T26] audit: type=1326 audit(1746027735.066:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17046 comm="syz.6.2982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f933ff8e969 code=0x7fc00000 [ 1327.831268][ C1] vkms_vblank_simulate: vblank timer overrun [ 1327.876919][T17081] device syzkaller1 entered promiscuous mode [ 1327.883359][ T26] audit: type=1326 audit(1746027735.066:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17046 comm="syz.6.2982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f933ff8e969 code=0x7fc00000 [ 1327.966752][ T26] audit: type=1326 audit(1746027735.066:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17046 comm="syz.6.2982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f933ff8e969 code=0x7fc00000 [ 1328.097453][T17088] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2986'. [ 1328.142629][T17088] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2986'. [ 1328.184921][T17088] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2986'. [ 1328.211551][T17088] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 1332.440603][T17167] 9pnet_virtio: no channels available for device syz [ 1332.590287][T17165] block device autoloading is deprecated and will be removed. [ 1333.322663][T17172] fuse: Unknown parameter '0x0000000000000004' [ 1339.253531][T17276] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1339.316047][T17276] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1339.356407][T17276] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1339.416117][T17276] bond0: (slave bond_slave_0): Releasing backup interface [ 1339.578206][T17276] bond0: (slave bond_slave_1): Releasing backup interface [ 1341.580271][T17276] team0: Port device team_slave_0 removed [ 1341.648539][T17276] team0: Port device team_slave_1 removed [ 1341.682772][T17276] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1341.761647][T17276] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1341.827925][T17276] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1341.869183][T17276] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1342.560543][T17309] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3039'. [ 1343.218905][T17333] hub 6-0:1.0: USB hub found [ 1343.225642][T17333] hub 6-0:1.0: 1 port detected [ 1344.382247][T17344] tmpfs: Unknown parameter 'm' [ 1346.440154][T17389] Bluetooth: MGMT ver 1.22 [ 1350.004054][T17448] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3079'. [ 1350.062158][T17450] overlayfs: missing 'lowerdir' [ 1351.420739][ T26] kauditd_printk_skb: 52 callbacks suppressed [ 1351.420755][ T26] audit: type=1326 audit(1746027759.876:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17460 comm="syz.5.3080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4f4d8e969 code=0x7ffc0000 [ 1352.016008][ T26] audit: type=1326 audit(1746027760.396:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17460 comm="syz.5.3080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4f4d8e969 code=0x7ffc0000 [ 1352.318966][ T26] audit: type=1326 audit(1746027760.396:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17460 comm="syz.5.3080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fe4f4d8e969 code=0x7ffc0000 [ 1352.420420][ T26] audit: type=1326 audit(1746027760.396:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17460 comm="syz.5.3080" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe4f4d8e969 code=0x0 [ 1352.484384][ T26] audit: type=1326 audit(1746027760.396:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17460 comm="syz.5.3080" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe4f4d8e969 code=0x0 [ 1352.568063][T17478] hub 2-0:1.0: USB hub found [ 1352.574022][T17478] hub 2-0:1.0: 1 port detected [ 1355.742917][T17510] netlink: 'syz.0.3093': attribute type 1 has an invalid length. [ 1355.807241][T17510] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1355.941829][T17514] bond1: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 1355.992225][T17516] program syz.5.3095 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1356.523523][T17533] bond0: (slave rose0): Enslaving as an active interface with an up link [ 1357.090334][T17555] loop4: detected capacity change from 0 to 524255232 [ 1357.108293][T17556] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3106'. [ 1357.145147][T17556] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3106'. [ 1357.171144][T17556] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3106'. [ 1357.269069][ T4296] usb 7-1: new full-speed USB device number 12 using dummy_hcd [ 1357.471190][ T4296] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1357.497171][ T4296] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1357.572877][ T4296] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1357.591971][ T4296] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1357.846737][ T4296] usb 7-1: usb_control_msg returned -32 [ 1357.852584][ T4296] usbtmc 7-1:16.0: can't read capabilities [ 1358.297422][T17581] binder: 17580:17581 ioctl c0306201 200000000540 returned -14 [ 1358.431205][T17584] device wlan0 entered promiscuous mode [ 1359.456723][T17574] kernel read not supported for file /!sel (pid: 17574 comm: syz.2.3111) [ 1359.520668][T17588] 9pnet_fd: Insufficient options for proto=fd [ 1359.613111][ T26] audit: type=1800 audit(1746027768.066:505): pid=17574 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3111" name="!sel" dev="mqueue" ino=81018 res=0 errno=0 [ 1360.063345][T11991] usb 7-1: USB disconnect, device number 12 [ 1362.162310][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1362.170699][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1368.421689][T17734] exFAT-fs (nullb0): invalid boot record signature [ 1368.448703][T17734] exFAT-fs (nullb0): failed to read boot sector [ 1368.455674][T17734] exFAT-fs (nullb0): failed to recognize exfat type [ 1372.400623][T16454] Bluetooth: hci1: unexpected event for opcode 0x0c22 [ 1374.928690][ T52] block nbd3: Attempted send on invalid socket [ 1374.935756][ T52] I/O error, dev nbd3, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1374.945461][T17882] qnx6: unable to read the first superblock [ 1376.442242][ T52] block nbd3: Attempted send on invalid socket [ 1376.448477][ T52] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1376.511245][T17882] qnx6: unable to read the first superblock [ 1376.629487][T17882] qnx6: unable to read the first superblock [ 1377.197135][T17920] kvm: pic: single mode not supported [ 1377.208677][T17920] kvm: pic: single mode not supported [ 1377.262010][T17920] kvm: pic: level sensitive irq not supported [ 1377.344034][T17920] kvm: pic: non byte read [ 1379.159190][T17964] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3211'. [ 1379.307917][T17968] bridge2: port 1(vlan2) entered blocking state [ 1379.346119][T17968] bridge2: port 1(vlan2) entered disabled state [ 1381.753114][T16454] Bluetooth: hci1: unexpected event for opcode 0x203d [ 1382.520032][T18017] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3226'. [ 1382.540714][T18017] netlink: 'syz.6.3226': attribute type 10 has an invalid length. [ 1383.680399][T18017] device veth0_vlan left promiscuous mode [ 1383.707813][T18025] ceph: No mds server is up or the cluster is laggy [ 1383.738308][ T9184] libceph: connect (1)[c::]:6789 error -101 [ 1383.746125][ T9184] libceph: mon0 (1)[c::]:6789 connect error [ 1383.752913][T18017] device veth0_vlan entered promiscuous mode [ 1383.769544][T18017] team0: Device veth0_vlan failed to register rx_handler [ 1383.947826][T18017] syz.6.3226 (18017) used greatest stack depth: 19648 bytes left [ 1385.829355][T16454] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 1385.838555][T16454] Bluetooth: hci1: Injecting HCI hardware error event [ 1385.848358][ T4264] Bluetooth: hci1: hardware error 0x00 [ 1385.992519][T18040] kernel read not supported for file /!sel (pid: 18040 comm: syz.5.3233) [ 1386.061714][T18054] 9pnet_fd: Insufficient options for proto=fd [ 1386.097474][ T26] audit: type=1800 audit(1746027794.546:506): pid=18040 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3233" name="!sel" dev="mqueue" ino=82706 res=0 errno=0 [ 1386.820220][T18078] block nbd6: shutting down sockets [ 1386.829387][T18088] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3242'. [ 1387.436586][T18100] 9pnet_virtio: no channels available for device syz [ 1387.909100][ T4264] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1388.501764][ T4264] Bluetooth: hci0: unexpected event for opcode 0x0803 [ 1389.270578][T18149] ieee802154 phy0 wpan0: encryption failed: -22 [ 1390.090339][T18163] device syzkaller0 entered promiscuous mode [ 1390.669550][T18179] 9pnet_virtio: no channels available for device syz [ 1391.579013][T18183] tmpfs: Unknown parameter 'grpquota' [ 1392.399721][T18181] netlink: 'syz.5.3275': attribute type 1 has an invalid length. [ 1392.407540][T18181] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3275'. [ 1393.498924][ T4264] Bluetooth: hci0: unexpected event for opcode 0x0c22 [ 1394.086592][ T26] audit: type=1400 audit(1746027802.536:507): apparmor="DENIED" operation="change_profile" info="label not found" error=-22 profile="unconfined" name="&" pid=18222 comm="syz.6.3287" [ 1394.727692][T18231] device wireguard1 entered promiscuous mode [ 1394.767757][T18240] binder: 18239:18240 ioctl c018620c 200000000380 returned -22 [ 1394.883585][ T4264] Bluetooth: hci0: Ignoring connect complete event for invalid link type [ 1398.061983][T18300] device wlan0 entered promiscuous mode [ 1400.736231][T18353] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3315'. [ 1400.988589][T18356] device wlan0 entered promiscuous mode [ 1401.047089][ T9207] usb 6-1: new full-speed USB device number 42 using dummy_hcd [ 1401.292700][ T4330] hid-generic FFFC:0003:0000.0003: unknown main item tag 0x0 [ 1401.313861][ T4330] hid-generic FFFC:0003:0000.0003: unknown main item tag 0x0 [ 1401.335603][ T4330] hid-generic FFFC:0003:0000.0003: unknown main item tag 0x0 [ 1401.337389][ T9207] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1401.375085][ T4330] hid-generic FFFC:0003:0000.0003: unknown main item tag 0x0 [ 1401.402600][ T9207] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1401.412986][ T4330] hid-generic FFFC:0003:0000.0003: unknown main item tag 0x0 [ 1401.446868][ T9207] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1401.458095][ T4330] hid-generic FFFC:0003:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1401.488518][ T9207] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1401.552602][ T9207] usb 6-1: config 0 descriptor?? [ 1401.586685][ T9207] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1401.629764][ T9207] dvb-usb: bulk message failed: -22 (3/0) [ 1401.704437][ T9207] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1401.723809][ T9207] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1401.740262][ T9207] usb 6-1: media controller created [ 1401.793535][ T9207] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1401.985528][ T9207] dvb-usb: bulk message failed: -22 (6/0) [ 1402.045410][ T9207] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1402.144933][ T9207] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input16 [ 1402.313525][ T9207] dvb-usb: schedule remote query interval to 150 msecs. [ 1402.340966][ T9207] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1402.384922][ T9207] usb 6-1: USB disconnect, device number 42 [ 1402.513050][ T9207] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1404.256825][T18433] overlayfs: missing 'lowerdir' [ 1404.320923][T18435] netlink: 'syz.2.3340': attribute type 1 has an invalid length. [ 1404.433541][T18433] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1404.508542][T18433] bond2: (slave bond3): making interface the new active one [ 1404.580495][T18433] bond2: (slave bond3): Enslaving as an active interface with an up link [ 1404.788956][T16454] Bluetooth: hci0: command 0x0406 tx timeout [ 1405.980531][T18471] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3349'. [ 1406.301726][ T4240] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 1406.589429][ T4240] usb 7-1: Using ep0 maxpacket: 32 [ 1406.648206][ T4240] usb 7-1: config 0 has an invalid interface number: 51 but max is 0 [ 1406.867104][ T4240] usb 7-1: config 0 has no interface number 0 [ 1407.046927][ T4240] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1407.260432][ T4240] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1407.278872][ T4240] usb 7-1: Product: syz [ 1407.289095][ T4240] usb 7-1: Manufacturer: syz [ 1407.293976][ T4240] usb 7-1: SerialNumber: syz [ 1407.409049][ T4240] usb 7-1: config 0 descriptor?? [ 1407.419684][ T4240] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1408.071790][ T4240] usb 7-1: qt2_attach - failed to power on unit: -71 [ 1408.098075][ T4240] quatech2: probe of 7-1:0.51 failed with error -71 [ 1408.279444][ T4240] usb 7-1: USB disconnect, device number 13 [ 1413.419030][ T4330] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 1413.588868][ T4330] usb 6-1: device descriptor read/64, error -71 [ 1413.858977][ T4330] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 1414.019051][ T4330] usb 6-1: device descriptor read/64, error -71 [ 1414.139112][ T4330] usb usb6-port1: attempt power cycle [ 1414.547148][T18544] device wg2 left promiscuous mode [ 1414.571584][ T4330] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 1415.064069][ T93] block nbd0: Attempted send on invalid socket [ 1415.070475][ T93] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 1415.085364][T18599] XFS (nbd0): SB validate failed with error -5. [ 1415.571721][ T4330] usb 6-1: device descriptor read/8, error -71 [ 1416.103071][T18544] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1416.116847][T18544] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1416.126316][T18544] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1416.155478][T18544] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1416.301147][T18544] device wlan0 left promiscuous mode [ 1416.566898][T18619] loop4: detected capacity change from 0 to 524255232 [ 1417.241078][T18636] binder: 18634:18636 ioctl 40046205 0 returned -22 [ 1419.677882][T18660] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3781544950 (3781544950 ns) > initial count (699260337 ns). Using initial count to start timer. [ 1422.187167][T18714] gfs2: not a GFS2 filesystem [ 1422.961260][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1422.967743][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.851740][T18748] 9pnet_virtio: no channels available for device syz [ 1424.397641][T18763] overlayfs: missing 'lowerdir' [ 1424.426146][T18763] netlink: 'syz.5.3420': attribute type 1 has an invalid length. [ 1424.736998][T18768] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1424.774110][T18768] bond1: (slave bond2): making interface the new active one [ 1424.815035][T18768] bond1: (slave bond2): Enslaving as an active interface with an up link [ 1426.479042][T18802] tmpfs: Unknown parameter 'grpquota' [ 1427.811931][T18812] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1429.721675][ T4264] Bluetooth: hci3: Ignoring connect complete event for invalid link type [ 1429.769018][T18851] block nbd3: Device being setup by another task [ 1429.780259][T18845] block nbd3: shutting down sockets [ 1430.148994][ T4264] Bluetooth: hci2: command 0x0406 tx timeout [ 1431.793989][T18862] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3442'. [ 1434.759207][T18920] block nbd0: Device being setup by another task [ 1434.779950][T18918] block nbd0: shutting down sockets [ 1437.527134][ T93] block nbd2: Attempted send on invalid socket [ 1437.533573][ T93] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 1437.544850][T18956] XFS (nbd2): SB validate failed with error -5. [ 1440.241228][T18993] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3469'. [ 1441.291384][T19022] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1447.403151][T19125] 9pnet_virtio: no channels available for device syz [ 1556.078842][ C1] ------------[ cut here ]------------ [ 1556.086482][ C1] WARNING: CPU: 1 PID: 0 at kernel/rcu/tree_stall.h:970 rcu_check_gp_start_stall+0x2dc/0x460 [ 1556.096718][ C1] Modules linked in: [ 1556.100661][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 6.1.135-syzkaller #0 [ 1556.108406][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1556.118505][ C1] RIP: 0010:rcu_check_gp_start_stall+0x2dc/0x460 [ 1556.124883][ C1] Code: ff ff ff 48 c7 c7 00 2f a0 96 be 04 00 00 00 e8 0a aa 66 00 48 89 df b8 01 00 00 00 87 05 8c a5 34 15 85 c0 0f 85 19 ff ff ff <0f> 0b 48 81 ff 40 ff 92 8c 74 47 48 c7 c0 24 af fe 8d 48 c1 e8 03 [ 1556.144531][ C1] RSP: 0018:ffffc900001e0b78 EFLAGS: 00010046 [ 1556.150632][ C1] RAX: 0000000000000000 RBX: ffffffff8c92ff40 RCX: ffffffff816b8966 [ 1556.158635][ C1] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffffff8c92ff40 [ 1556.166633][ C1] RBP: ffffc900001e0df0 R08: 0000000000000004 R09: 0000000000000003 [ 1556.174661][ C1] R10: fffffbfff2d405e0 R11: 1ffffffff2d405e0 R12: 0000000000002904 [ 1556.182672][ C1] R13: dffffc0000000000 R14: 0000000000000a06 R15: dffffc0000000000 [ 1556.190675][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1556.199638][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1556.206251][ C1] CR2: 0000000000000900 CR3: 00000000521df000 CR4: 00000000003526e0 [ 1556.214517][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1556.222521][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1556.230531][ C1] Call Trace: [ 1556.233841][ C1] [ 1556.236712][ C1] rcu_core+0x5d9/0x16a0 [ 1556.241016][ C1] ? lock_chain_count+0x20/0x20 [ 1556.245899][ C1] ? _raw_spin_lock_irq+0xab/0xe0 [ 1556.250971][ C1] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 1556.256407][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1556.261669][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 1556.266919][ C1] ? rcu_cpu_kthread_park+0x90/0x90 [ 1556.272242][ C1] ? __run_timers+0x770/0x7c0 [ 1556.276949][ C1] ? __run_timers+0x73d/0x7c0 [ 1556.281662][ C1] ? detach_timer+0x350/0x350 [ 1556.286368][ C1] ? detach_timer+0x350/0x350 [ 1556.291079][ C1] ? lock_chain_count+0x20/0x20 [ 1556.295965][ C1] ? seqcount_lockdep_reader_access+0x15c/0x1c0 [ 1556.302250][ C1] handle_softirqs+0x2a1/0x920 [ 1556.307064][ C1] ? __irq_exit_rcu+0x12f/0x220 [ 1556.311961][ C1] ? do_softirq+0x200/0x200 [ 1556.316510][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 1556.321754][ C1] __irq_exit_rcu+0x12f/0x220 [ 1556.326482][ C1] ? irq_exit_rcu+0x20/0x20 [ 1556.331032][ C1] irq_exit_rcu+0x5/0x20 [ 1556.335311][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 1556.340985][ C1] [ 1556.343937][ C1] [ 1556.346894][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1556.352924][ C1] RIP: 0010:default_idle+0xb/0x10 [ 1556.357994][ C1] Code: 48 89 df e8 87 55 b9 f7 e9 4c ff ff ff e8 4d 14 f6 ff 00 00 cc cc 00 00 cc cc 00 00 cc cc 00 66 90 0f 00 2d 37 c3 4d 00 fb f4 0f 1f 40 00 41 57 41 56 53 49 be 00 00 00 00 00 fc ff df 65 48 [ 1556.377633][ C1] RSP: 0018:ffffc90000177de8 EFLAGS: 000002c6 [ 1556.383747][ C1] RAX: bd12bb59345c1000 RBX: ffffffff8a18e0d7 RCX: bd12bb59345c1000 [ 1556.391759][ C1] RDX: 0000000000000001 RSI: ffffffff8a6bff00 RDI: ffffffff8abf0ea0 [ 1556.399856][ C1] RBP: ffffc90000177f20 R08: dffffc0000000000 R09: ffffed10171e6aee [ 1556.407915][ C1] R10: ffffed10171e6aee R11: 1ffff110171e6aed R12: 0000000000000001 [ 1556.415931][ C1] R13: dffffc0000000000 R14: ffff88813fef1dc0 R15: 1ffffffff1bfcf8e [ 1556.423951][ C1] ? default_idle_call+0x77/0xc0 [ 1556.428951][ C1] default_idle_call+0x84/0xc0 [ 1556.433763][ C1] do_idle+0x1fc/0x570 [ 1556.437878][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 1556.443121][ C1] ? schedule_idle+0x57/0x90 [ 1556.447745][ C1] ? do_idle+0x55c/0x570 [ 1556.452029][ C1] cpu_startup_entry+0x3f/0x60 [ 1556.456838][ C1] start_secondary+0xe4/0xf0 [ 1556.461460][ C1] secondary_startup_64_no_verify+0xcf/0xdb [ 1556.467403][ C1] [ 1556.470463][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1556.477756][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 6.1.135-syzkaller #0 [ 1556.485500][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1556.495574][ C1] Call Trace: [ 1556.498875][ C1] [ 1556.501734][ C1] dump_stack_lvl+0x168/0x22e [ 1556.506451][ C1] ? memcpy+0x3c/0x60 [ 1556.510463][ C1] ? show_regs_print_info+0x12/0x12 [ 1556.515699][ C1] ? load_image+0x3b0/0x3b0 [ 1556.520256][ C1] panic+0x2c9/0x710 [ 1556.524207][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 1556.528761][ C1] ? secondary_startup_64_no_verify+0xcf/0xdb [ 1556.534961][ C1] __warn+0x2f8/0x4f0 [ 1556.538979][ C1] ? rcu_check_gp_start_stall+0x2dc/0x460 [ 1556.544738][ C1] ? rcu_check_gp_start_stall+0x2dc/0x460 [ 1556.550497][ C1] report_bug+0x2ba/0x4f0 [ 1556.554862][ C1] ? rcu_check_gp_start_stall+0x2dc/0x460 [ 1556.560626][ C1] handle_bug+0x3a/0x70 [ 1556.564816][ C1] exc_invalid_op+0x16/0x40 [ 1556.569353][ C1] asm_exc_invalid_op+0x16/0x20 [ 1556.574235][ C1] RIP: 0010:rcu_check_gp_start_stall+0x2dc/0x460 [ 1556.580606][ C1] Code: ff ff ff 48 c7 c7 00 2f a0 96 be 04 00 00 00 e8 0a aa 66 00 48 89 df b8 01 00 00 00 87 05 8c a5 34 15 85 c0 0f 85 19 ff ff ff <0f> 0b 48 81 ff 40 ff 92 8c 74 47 48 c7 c0 24 af fe 8d 48 c1 e8 03 [ 1556.600246][ C1] RSP: 0018:ffffc900001e0b78 EFLAGS: 00010046 [ 1556.606355][ C1] RAX: 0000000000000000 RBX: ffffffff8c92ff40 RCX: ffffffff816b8966 [ 1556.614364][ C1] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffffff8c92ff40 [ 1556.622364][ C1] RBP: ffffc900001e0df0 R08: 0000000000000004 R09: 0000000000000003 [ 1556.630361][ C1] R10: fffffbfff2d405e0 R11: 1ffffffff2d405e0 R12: 0000000000002904 [ 1556.638359][ C1] R13: dffffc0000000000 R14: 0000000000000a06 R15: dffffc0000000000 [ 1556.646383][ C1] ? rcu_check_gp_start_stall+0x2c6/0x460 [ 1556.652161][ C1] ? rcu_check_gp_start_stall+0x2c6/0x460 [ 1556.657923][ C1] rcu_core+0x5d9/0x16a0 [ 1556.662202][ C1] ? lock_chain_count+0x20/0x20 [ 1556.667084][ C1] ? _raw_spin_lock_irq+0xab/0xe0 [ 1556.672144][ C1] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 1556.677560][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1556.682794][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 1556.688030][ C1] ? rcu_cpu_kthread_park+0x90/0x90 [ 1556.693253][ C1] ? __run_timers+0x770/0x7c0 [ 1556.697955][ C1] ? __run_timers+0x73d/0x7c0 [ 1556.702673][ C1] ? detach_timer+0x350/0x350 [ 1556.707372][ C1] ? detach_timer+0x350/0x350 [ 1556.712091][ C1] ? lock_chain_count+0x20/0x20 [ 1556.716983][ C1] ? seqcount_lockdep_reader_access+0x15c/0x1c0 [ 1556.723275][ C1] handle_softirqs+0x2a1/0x920 [ 1556.728091][ C1] ? __irq_exit_rcu+0x12f/0x220 [ 1556.732986][ C1] ? do_softirq+0x200/0x200 [ 1556.737531][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 1556.742773][ C1] __irq_exit_rcu+0x12f/0x220 [ 1556.747495][ C1] ? irq_exit_rcu+0x20/0x20 [ 1556.752049][ C1] irq_exit_rcu+0x5/0x20 [ 1556.756325][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 1556.761997][ C1] [ 1556.764948][ C1] [ 1556.767897][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1556.773925][ C1] RIP: 0010:default_idle+0xb/0x10 [ 1556.778985][ C1] Code: 48 89 df e8 87 55 b9 f7 e9 4c ff ff ff e8 4d 14 f6 ff 00 00 cc cc 00 00 cc cc 00 00 cc cc 00 66 90 0f 00 2d 37 c3 4d 00 fb f4 0f 1f 40 00 41 57 41 56 53 49 be 00 00 00 00 00 fc ff df 65 48 [ 1556.798619][ C1] RSP: 0018:ffffc90000177de8 EFLAGS: 000002c6 [ 1556.804710][ C1] RAX: bd12bb59345c1000 RBX: ffffffff8a18e0d7 RCX: bd12bb59345c1000 [ 1556.812679][ C1] RDX: 0000000000000001 RSI: ffffffff8a6bff00 RDI: ffffffff8abf0ea0 [ 1556.820646][ C1] RBP: ffffc90000177f20 R08: dffffc0000000000 R09: ffffed10171e6aee [ 1556.828612][ C1] R10: ffffed10171e6aee R11: 1ffff110171e6aed R12: 0000000000000001 [ 1556.836578][ C1] R13: dffffc0000000000 R14: ffff88813fef1dc0 R15: 1ffffffff1bfcf8e [ 1556.844551][ C1] ? default_idle_call+0x77/0xc0 [ 1556.849502][ C1] default_idle_call+0x84/0xc0 [ 1556.854263][ C1] do_idle+0x1fc/0x570 [ 1556.858336][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 1556.863538][ C1] ? schedule_idle+0x57/0x90 [ 1556.868126][ C1] ? do_idle+0x55c/0x570 [ 1556.872375][ C1] cpu_startup_entry+0x3f/0x60 [ 1556.877139][ C1] start_secondary+0xe4/0xf0 [ 1556.881727][ C1] secondary_startup_64_no_verify+0xcf/0xdb [ 1556.887630][ C1] [ 1556.890984][ C1] Kernel Offset: disabled [ 1556.896064][ C1] Rebooting in 86400 seconds..